Jul 10 00:46:39.057704 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Wed Jul 9 23:09:45 -00 2025 Jul 10 00:46:39.057730 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:46:39.057738 kernel: BIOS-provided physical RAM map: Jul 10 00:46:39.057744 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 10 00:46:39.057750 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 10 00:46:39.057755 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 10 00:46:39.057762 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Jul 10 00:46:39.057768 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Jul 10 00:46:39.057775 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 10 00:46:39.057780 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Jul 10 00:46:39.057786 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jul 10 00:46:39.057791 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 10 00:46:39.057797 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Jul 10 00:46:39.057802 kernel: NX (Execute Disable) protection: active Jul 10 00:46:39.057811 kernel: SMBIOS 2.8 present. Jul 10 00:46:39.057817 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Jul 10 00:46:39.057823 kernel: Hypervisor detected: KVM Jul 10 00:46:39.057829 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 10 00:46:39.057838 kernel: kvm-clock: cpu 0, msr 2e19a001, primary cpu clock Jul 10 00:46:39.057844 kernel: kvm-clock: using sched offset of 3444214761 cycles Jul 10 00:46:39.057850 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 10 00:46:39.057857 kernel: tsc: Detected 2794.748 MHz processor Jul 10 00:46:39.057870 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 10 00:46:39.057879 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 10 00:46:39.057885 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Jul 10 00:46:39.057892 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 10 00:46:39.057898 kernel: Using GB pages for direct mapping Jul 10 00:46:39.057904 kernel: ACPI: Early table checksum verification disabled Jul 10 00:46:39.057910 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Jul 10 00:46:39.057917 kernel: ACPI: RSDT 0x000000009CFE241A 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:39.057923 kernel: ACPI: FACP 0x000000009CFE21FA 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:39.057929 kernel: ACPI: DSDT 0x000000009CFE0040 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:39.057937 kernel: ACPI: FACS 0x000000009CFE0000 000040 Jul 10 00:46:39.057943 kernel: ACPI: APIC 0x000000009CFE22EE 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:39.057949 kernel: ACPI: HPET 0x000000009CFE237E 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:39.057955 kernel: ACPI: MCFG 0x000000009CFE23B6 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:39.057961 kernel: ACPI: WAET 0x000000009CFE23F2 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:39.057967 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21fa-0x9cfe22ed] Jul 10 00:46:39.057974 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21f9] Jul 10 00:46:39.057980 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Jul 10 00:46:39.057990 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22ee-0x9cfe237d] Jul 10 00:46:39.057997 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe237e-0x9cfe23b5] Jul 10 00:46:39.058003 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23b6-0x9cfe23f1] Jul 10 00:46:39.058010 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23f2-0x9cfe2419] Jul 10 00:46:39.058016 kernel: No NUMA configuration found Jul 10 00:46:39.058023 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Jul 10 00:46:39.058031 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Jul 10 00:46:39.058038 kernel: Zone ranges: Jul 10 00:46:39.058045 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 10 00:46:39.058051 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Jul 10 00:46:39.058058 kernel: Normal empty Jul 10 00:46:39.058064 kernel: Movable zone start for each node Jul 10 00:46:39.058071 kernel: Early memory node ranges Jul 10 00:46:39.058077 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 10 00:46:39.058084 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Jul 10 00:46:39.058090 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Jul 10 00:46:39.058102 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 10 00:46:39.058108 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 10 00:46:39.058115 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Jul 10 00:46:39.058121 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 10 00:46:39.058128 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 10 00:46:39.058134 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 10 00:46:39.058141 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 10 00:46:39.058148 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 10 00:46:39.058154 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 10 00:46:39.058164 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 10 00:46:39.058171 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 10 00:46:39.058178 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 10 00:46:39.058184 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 10 00:46:39.058191 kernel: TSC deadline timer available Jul 10 00:46:39.058197 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 10 00:46:39.058203 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 10 00:46:39.058210 kernel: kvm-guest: setup PV sched yield Jul 10 00:46:39.058217 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Jul 10 00:46:39.058225 kernel: Booting paravirtualized kernel on KVM Jul 10 00:46:39.058232 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 10 00:46:39.058239 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 10 00:46:39.058246 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 10 00:46:39.058252 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 10 00:46:39.058259 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 10 00:46:39.058265 kernel: kvm-guest: setup async PF for cpu 0 Jul 10 00:46:39.058271 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Jul 10 00:46:39.058278 kernel: kvm-guest: PV spinlocks enabled Jul 10 00:46:39.058286 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 10 00:46:39.058293 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Jul 10 00:46:39.058299 kernel: Policy zone: DMA32 Jul 10 00:46:39.058307 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:46:39.058314 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 10 00:46:39.058320 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 10 00:46:39.058327 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 10 00:46:39.058334 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 10 00:46:39.058342 kernel: Memory: 2436696K/2571752K available (12295K kernel code, 2275K rwdata, 13724K rodata, 47472K init, 4108K bss, 134796K reserved, 0K cma-reserved) Jul 10 00:46:39.058349 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 10 00:46:39.058356 kernel: ftrace: allocating 34602 entries in 136 pages Jul 10 00:46:39.058362 kernel: ftrace: allocated 136 pages with 2 groups Jul 10 00:46:39.058369 kernel: rcu: Hierarchical RCU implementation. Jul 10 00:46:39.058376 kernel: rcu: RCU event tracing is enabled. Jul 10 00:46:39.058382 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 10 00:46:39.058389 kernel: Rude variant of Tasks RCU enabled. Jul 10 00:46:39.058396 kernel: Tracing variant of Tasks RCU enabled. Jul 10 00:46:39.058404 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 10 00:46:39.058411 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 10 00:46:39.058417 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 10 00:46:39.058423 kernel: random: crng init done Jul 10 00:46:39.058430 kernel: Console: colour VGA+ 80x25 Jul 10 00:46:39.058436 kernel: printk: console [ttyS0] enabled Jul 10 00:46:39.058443 kernel: ACPI: Core revision 20210730 Jul 10 00:46:39.058449 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 10 00:46:39.058456 kernel: APIC: Switch to symmetric I/O mode setup Jul 10 00:46:39.058464 kernel: x2apic enabled Jul 10 00:46:39.058471 kernel: Switched APIC routing to physical x2apic. Jul 10 00:46:39.058480 kernel: kvm-guest: setup PV IPIs Jul 10 00:46:39.058486 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 10 00:46:39.058493 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 10 00:46:39.058502 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794748) Jul 10 00:46:39.058508 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 10 00:46:39.058515 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 10 00:46:39.058522 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 10 00:46:39.058535 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 10 00:46:39.058542 kernel: Spectre V2 : Mitigation: Retpolines Jul 10 00:46:39.058549 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 10 00:46:39.058558 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 10 00:46:39.058573 kernel: RETBleed: Mitigation: untrained return thunk Jul 10 00:46:39.058580 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 10 00:46:39.058588 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 10 00:46:39.058595 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 10 00:46:39.058602 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 10 00:46:39.058611 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 10 00:46:39.058617 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 10 00:46:39.058624 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 10 00:46:39.058643 kernel: Freeing SMP alternatives memory: 32K Jul 10 00:46:39.058650 kernel: pid_max: default: 32768 minimum: 301 Jul 10 00:46:39.058657 kernel: LSM: Security Framework initializing Jul 10 00:46:39.058664 kernel: SELinux: Initializing. Jul 10 00:46:39.058671 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:46:39.058679 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:46:39.058687 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 10 00:46:39.058694 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 10 00:46:39.058700 kernel: ... version: 0 Jul 10 00:46:39.058707 kernel: ... bit width: 48 Jul 10 00:46:39.058714 kernel: ... generic registers: 6 Jul 10 00:46:39.058721 kernel: ... value mask: 0000ffffffffffff Jul 10 00:46:39.058728 kernel: ... max period: 00007fffffffffff Jul 10 00:46:39.058737 kernel: ... fixed-purpose events: 0 Jul 10 00:46:39.058743 kernel: ... event mask: 000000000000003f Jul 10 00:46:39.058750 kernel: signal: max sigframe size: 1776 Jul 10 00:46:39.058757 kernel: rcu: Hierarchical SRCU implementation. Jul 10 00:46:39.058764 kernel: smp: Bringing up secondary CPUs ... Jul 10 00:46:39.058771 kernel: x86: Booting SMP configuration: Jul 10 00:46:39.058778 kernel: .... node #0, CPUs: #1 Jul 10 00:46:39.058785 kernel: kvm-clock: cpu 1, msr 2e19a041, secondary cpu clock Jul 10 00:46:39.058792 kernel: kvm-guest: setup async PF for cpu 1 Jul 10 00:46:39.058798 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Jul 10 00:46:39.058807 kernel: #2 Jul 10 00:46:39.058814 kernel: kvm-clock: cpu 2, msr 2e19a081, secondary cpu clock Jul 10 00:46:39.058820 kernel: kvm-guest: setup async PF for cpu 2 Jul 10 00:46:39.058827 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Jul 10 00:46:39.058834 kernel: #3 Jul 10 00:46:39.058844 kernel: kvm-clock: cpu 3, msr 2e19a0c1, secondary cpu clock Jul 10 00:46:39.058851 kernel: kvm-guest: setup async PF for cpu 3 Jul 10 00:46:39.058858 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Jul 10 00:46:39.058864 kernel: smp: Brought up 1 node, 4 CPUs Jul 10 00:46:39.058873 kernel: smpboot: Max logical packages: 1 Jul 10 00:46:39.058880 kernel: smpboot: Total of 4 processors activated (22357.98 BogoMIPS) Jul 10 00:46:39.058887 kernel: devtmpfs: initialized Jul 10 00:46:39.058894 kernel: x86/mm: Memory block size: 128MB Jul 10 00:46:39.058900 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 10 00:46:39.058907 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 10 00:46:39.058914 kernel: pinctrl core: initialized pinctrl subsystem Jul 10 00:46:39.058921 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 10 00:46:39.058928 kernel: audit: initializing netlink subsys (disabled) Jul 10 00:46:39.058937 kernel: audit: type=2000 audit(1752108398.439:1): state=initialized audit_enabled=0 res=1 Jul 10 00:46:39.058944 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 10 00:46:39.058951 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 10 00:46:39.058958 kernel: cpuidle: using governor menu Jul 10 00:46:39.058964 kernel: ACPI: bus type PCI registered Jul 10 00:46:39.058971 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 10 00:46:39.058978 kernel: dca service started, version 1.12.1 Jul 10 00:46:39.058985 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 10 00:46:39.058992 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 10 00:46:39.059001 kernel: PCI: Using configuration type 1 for base access Jul 10 00:46:39.059008 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 10 00:46:39.059015 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 10 00:46:39.059022 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 10 00:46:39.059028 kernel: ACPI: Added _OSI(Module Device) Jul 10 00:46:39.059035 kernel: ACPI: Added _OSI(Processor Device) Jul 10 00:46:39.059042 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 10 00:46:39.059049 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 10 00:46:39.059056 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 10 00:46:39.059064 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 10 00:46:39.059071 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 10 00:46:39.059078 kernel: ACPI: Interpreter enabled Jul 10 00:46:39.059084 kernel: ACPI: PM: (supports S0 S3 S5) Jul 10 00:46:39.059091 kernel: ACPI: Using IOAPIC for interrupt routing Jul 10 00:46:39.059098 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 10 00:46:39.059105 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 10 00:46:39.059112 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 10 00:46:39.059259 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 10 00:46:39.059341 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 10 00:46:39.059415 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 10 00:46:39.059425 kernel: PCI host bridge to bus 0000:00 Jul 10 00:46:39.059524 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 10 00:46:39.059603 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 10 00:46:39.059684 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 10 00:46:39.059760 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 10 00:46:39.059827 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 10 00:46:39.059891 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Jul 10 00:46:39.059957 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 10 00:46:39.060086 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 10 00:46:39.060281 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 10 00:46:39.060431 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Jul 10 00:46:39.060553 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Jul 10 00:46:39.060698 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Jul 10 00:46:39.060816 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 10 00:46:39.060999 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 10 00:46:39.061127 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Jul 10 00:46:39.061251 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Jul 10 00:46:39.061372 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Jul 10 00:46:39.061507 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 10 00:46:39.061651 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Jul 10 00:46:39.061757 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Jul 10 00:46:39.061856 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Jul 10 00:46:39.061959 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 10 00:46:39.062039 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Jul 10 00:46:39.062119 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Jul 10 00:46:39.062198 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Jul 10 00:46:39.062276 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Jul 10 00:46:39.062368 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 10 00:46:39.062450 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 10 00:46:39.062543 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 10 00:46:39.062663 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Jul 10 00:46:39.062753 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Jul 10 00:46:39.062844 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 10 00:46:39.062922 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Jul 10 00:46:39.062932 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 10 00:46:39.062940 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 10 00:46:39.062947 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 10 00:46:39.062955 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 10 00:46:39.062962 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 10 00:46:39.062972 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 10 00:46:39.062979 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 10 00:46:39.062987 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 10 00:46:39.062994 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 10 00:46:39.063001 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 10 00:46:39.063010 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 10 00:46:39.063018 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 10 00:46:39.063025 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 10 00:46:39.063032 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 10 00:46:39.063041 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 10 00:46:39.063048 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 10 00:46:39.063055 kernel: iommu: Default domain type: Translated Jul 10 00:46:39.063066 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 10 00:46:39.063145 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 10 00:46:39.063225 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 10 00:46:39.063302 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 10 00:46:39.063312 kernel: vgaarb: loaded Jul 10 00:46:39.063322 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 10 00:46:39.063330 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 10 00:46:39.063339 kernel: PTP clock support registered Jul 10 00:46:39.063346 kernel: PCI: Using ACPI for IRQ routing Jul 10 00:46:39.063354 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 10 00:46:39.063361 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 10 00:46:39.063368 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Jul 10 00:46:39.063376 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 10 00:46:39.063383 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 10 00:46:39.063392 kernel: clocksource: Switched to clocksource kvm-clock Jul 10 00:46:39.063399 kernel: VFS: Disk quotas dquot_6.6.0 Jul 10 00:46:39.063406 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 10 00:46:39.063414 kernel: pnp: PnP ACPI init Jul 10 00:46:39.063521 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 10 00:46:39.063532 kernel: pnp: PnP ACPI: found 6 devices Jul 10 00:46:39.063540 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 10 00:46:39.063547 kernel: NET: Registered PF_INET protocol family Jul 10 00:46:39.063557 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 10 00:46:39.063573 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 10 00:46:39.063580 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 10 00:46:39.063588 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 10 00:46:39.063595 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 10 00:46:39.063602 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 10 00:46:39.063610 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:46:39.063617 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:46:39.063625 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 10 00:46:39.063651 kernel: NET: Registered PF_XDP protocol family Jul 10 00:46:39.063738 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 10 00:46:39.063810 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 10 00:46:39.063883 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 10 00:46:39.063952 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 10 00:46:39.064018 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 10 00:46:39.064083 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Jul 10 00:46:39.064093 kernel: PCI: CLS 0 bytes, default 64 Jul 10 00:46:39.064101 kernel: Initialise system trusted keyrings Jul 10 00:46:39.064112 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 10 00:46:39.064119 kernel: Key type asymmetric registered Jul 10 00:46:39.064126 kernel: Asymmetric key parser 'x509' registered Jul 10 00:46:39.064134 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 10 00:46:39.064141 kernel: io scheduler mq-deadline registered Jul 10 00:46:39.064148 kernel: io scheduler kyber registered Jul 10 00:46:39.064156 kernel: io scheduler bfq registered Jul 10 00:46:39.064163 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 10 00:46:39.064171 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 10 00:46:39.064180 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 10 00:46:39.064187 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 10 00:46:39.064195 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 10 00:46:39.064202 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 10 00:46:39.064209 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 10 00:46:39.064217 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 10 00:46:39.064225 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 10 00:46:39.064232 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 10 00:46:39.064324 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 10 00:46:39.064400 kernel: rtc_cmos 00:04: registered as rtc0 Jul 10 00:46:39.064469 kernel: rtc_cmos 00:04: setting system clock to 2025-07-10T00:46:38 UTC (1752108398) Jul 10 00:46:39.064540 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 10 00:46:39.064549 kernel: NET: Registered PF_INET6 protocol family Jul 10 00:46:39.064557 kernel: Segment Routing with IPv6 Jul 10 00:46:39.064572 kernel: In-situ OAM (IOAM) with IPv6 Jul 10 00:46:39.064579 kernel: NET: Registered PF_PACKET protocol family Jul 10 00:46:39.064586 kernel: Key type dns_resolver registered Jul 10 00:46:39.064596 kernel: IPI shorthand broadcast: enabled Jul 10 00:46:39.064603 kernel: sched_clock: Marking stable (457001744, 99276771)->(582952915, -26674400) Jul 10 00:46:39.064611 kernel: registered taskstats version 1 Jul 10 00:46:39.064618 kernel: Loading compiled-in X.509 certificates Jul 10 00:46:39.064625 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: 6ebecdd7757c0df63fc51731f0b99957f4e4af16' Jul 10 00:46:39.064643 kernel: Key type .fscrypt registered Jul 10 00:46:39.064650 kernel: Key type fscrypt-provisioning registered Jul 10 00:46:39.064658 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 10 00:46:39.064668 kernel: ima: Allocated hash algorithm: sha1 Jul 10 00:46:39.064676 kernel: ima: No architecture policies found Jul 10 00:46:39.064684 kernel: clk: Disabling unused clocks Jul 10 00:46:39.064691 kernel: Freeing unused kernel image (initmem) memory: 47472K Jul 10 00:46:39.064698 kernel: Write protecting the kernel read-only data: 28672k Jul 10 00:46:39.064705 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 10 00:46:39.064712 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K Jul 10 00:46:39.064720 kernel: Run /init as init process Jul 10 00:46:39.064727 kernel: with arguments: Jul 10 00:46:39.064736 kernel: /init Jul 10 00:46:39.064743 kernel: with environment: Jul 10 00:46:39.064750 kernel: HOME=/ Jul 10 00:46:39.064757 kernel: TERM=linux Jul 10 00:46:39.064764 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 10 00:46:39.064774 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:46:39.064785 systemd[1]: Detected virtualization kvm. Jul 10 00:46:39.064793 systemd[1]: Detected architecture x86-64. Jul 10 00:46:39.064804 systemd[1]: Running in initrd. Jul 10 00:46:39.064812 systemd[1]: No hostname configured, using default hostname. Jul 10 00:46:39.064819 systemd[1]: Hostname set to . Jul 10 00:46:39.064827 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:46:39.064836 systemd[1]: Queued start job for default target initrd.target. Jul 10 00:46:39.064845 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:46:39.064855 systemd[1]: Reached target cryptsetup.target. Jul 10 00:46:39.064864 systemd[1]: Reached target paths.target. Jul 10 00:46:39.064873 systemd[1]: Reached target slices.target. Jul 10 00:46:39.064885 systemd[1]: Reached target swap.target. Jul 10 00:46:39.064904 systemd[1]: Reached target timers.target. Jul 10 00:46:39.064916 systemd[1]: Listening on iscsid.socket. Jul 10 00:46:39.064928 systemd[1]: Listening on iscsiuio.socket. Jul 10 00:46:39.064938 systemd[1]: Listening on systemd-journald-audit.socket. Jul 10 00:46:39.064950 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 10 00:46:39.064960 systemd[1]: Listening on systemd-journald.socket. Jul 10 00:46:39.064970 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:46:39.064980 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:46:39.064989 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:46:39.064999 systemd[1]: Reached target sockets.target. Jul 10 00:46:39.065009 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:46:39.065019 systemd[1]: Finished network-cleanup.service. Jul 10 00:46:39.065029 systemd[1]: Starting systemd-fsck-usr.service... Jul 10 00:46:39.065040 systemd[1]: Starting systemd-journald.service... Jul 10 00:46:39.065052 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:46:39.065062 systemd[1]: Starting systemd-resolved.service... Jul 10 00:46:39.065071 systemd[1]: Starting systemd-vconsole-setup.service... Jul 10 00:46:39.065079 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:46:39.065087 systemd[1]: Finished systemd-fsck-usr.service. Jul 10 00:46:39.065095 kernel: audit: type=1130 audit(1752108399.046:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.065103 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:46:39.065112 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:46:39.065124 systemd-journald[199]: Journal started Jul 10 00:46:39.065188 systemd-journald[199]: Runtime Journal (/run/log/journal/c33ff1246d3d4be2b7a21a5f52c92db9) is 6.0M, max 48.5M, 42.5M free. Jul 10 00:46:39.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.055285 systemd-modules-load[200]: Inserted module 'overlay' Jul 10 00:46:39.090274 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 10 00:46:39.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.069233 systemd-resolved[201]: Positive Trust Anchors: Jul 10 00:46:39.095367 kernel: audit: type=1130 audit(1752108399.089:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.095382 systemd[1]: Started systemd-journald.service. Jul 10 00:46:39.095393 kernel: Bridge firewalling registered Jul 10 00:46:39.069240 systemd-resolved[201]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:46:39.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.069267 systemd-resolved[201]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:46:39.105764 kernel: audit: type=1130 audit(1752108399.096:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.071552 systemd-resolved[201]: Defaulting to hostname 'linux'. Jul 10 00:46:39.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.093190 systemd-modules-load[200]: Inserted module 'br_netfilter' Jul 10 00:46:39.097578 systemd[1]: Started systemd-resolved.service. Jul 10 00:46:39.110919 kernel: audit: type=1130 audit(1752108399.106:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.107613 systemd[1]: Finished systemd-vconsole-setup.service. Jul 10 00:46:39.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.113477 systemd[1]: Reached target nss-lookup.target. Jul 10 00:46:39.118357 kernel: audit: type=1130 audit(1752108399.112:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.118376 kernel: SCSI subsystem initialized Jul 10 00:46:39.119098 systemd[1]: Starting dracut-cmdline-ask.service... Jul 10 00:46:39.129689 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 10 00:46:39.129717 kernel: device-mapper: uevent: version 1.0.3 Jul 10 00:46:39.129730 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 10 00:46:39.131310 systemd[1]: Finished dracut-cmdline-ask.service. Jul 10 00:46:39.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.136942 kernel: audit: type=1130 audit(1752108399.132:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.133961 systemd[1]: Starting dracut-cmdline.service... Jul 10 00:46:39.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.136114 systemd-modules-load[200]: Inserted module 'dm_multipath' Jul 10 00:46:39.143527 kernel: audit: type=1130 audit(1752108399.138:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.137086 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:46:39.139287 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:46:39.146306 dracut-cmdline[219]: dracut-dracut-053 Jul 10 00:46:39.148194 dracut-cmdline[219]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:46:39.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.148580 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:46:39.158358 kernel: audit: type=1130 audit(1752108399.153:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.243674 kernel: Loading iSCSI transport class v2.0-870. Jul 10 00:46:39.259651 kernel: iscsi: registered transport (tcp) Jul 10 00:46:39.280831 kernel: iscsi: registered transport (qla4xxx) Jul 10 00:46:39.280879 kernel: QLogic iSCSI HBA Driver Jul 10 00:46:39.313354 systemd[1]: Finished dracut-cmdline.service. Jul 10 00:46:39.318211 kernel: audit: type=1130 audit(1752108399.313:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.315154 systemd[1]: Starting dracut-pre-udev.service... Jul 10 00:46:39.360652 kernel: raid6: avx2x4 gen() 29868 MB/s Jul 10 00:46:39.377647 kernel: raid6: avx2x4 xor() 7415 MB/s Jul 10 00:46:39.394653 kernel: raid6: avx2x2 gen() 32072 MB/s Jul 10 00:46:39.411653 kernel: raid6: avx2x2 xor() 18911 MB/s Jul 10 00:46:39.428661 kernel: raid6: avx2x1 gen() 26134 MB/s Jul 10 00:46:39.445651 kernel: raid6: avx2x1 xor() 15142 MB/s Jul 10 00:46:39.462648 kernel: raid6: sse2x4 gen() 14617 MB/s Jul 10 00:46:39.479650 kernel: raid6: sse2x4 xor() 7206 MB/s Jul 10 00:46:39.496661 kernel: raid6: sse2x2 gen() 15730 MB/s Jul 10 00:46:39.513650 kernel: raid6: sse2x2 xor() 9383 MB/s Jul 10 00:46:39.530656 kernel: raid6: sse2x1 gen() 11135 MB/s Jul 10 00:46:39.548031 kernel: raid6: sse2x1 xor() 6675 MB/s Jul 10 00:46:39.548052 kernel: raid6: using algorithm avx2x2 gen() 32072 MB/s Jul 10 00:46:39.548062 kernel: raid6: .... xor() 18911 MB/s, rmw enabled Jul 10 00:46:39.548718 kernel: raid6: using avx2x2 recovery algorithm Jul 10 00:46:39.561662 kernel: xor: automatically using best checksumming function avx Jul 10 00:46:39.653671 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 10 00:46:39.663847 systemd[1]: Finished dracut-pre-udev.service. Jul 10 00:46:39.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.664000 audit: BPF prog-id=7 op=LOAD Jul 10 00:46:39.664000 audit: BPF prog-id=8 op=LOAD Jul 10 00:46:39.665974 systemd[1]: Starting systemd-udevd.service... Jul 10 00:46:39.679343 systemd-udevd[400]: Using default interface naming scheme 'v252'. Jul 10 00:46:39.683480 systemd[1]: Started systemd-udevd.service. Jul 10 00:46:39.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.685624 systemd[1]: Starting dracut-pre-trigger.service... Jul 10 00:46:39.699127 dracut-pre-trigger[407]: rd.md=0: removing MD RAID activation Jul 10 00:46:39.727860 systemd[1]: Finished dracut-pre-trigger.service. Jul 10 00:46:39.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.729263 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:46:39.765881 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:46:39.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:39.798205 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 10 00:46:39.803857 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 10 00:46:39.803873 kernel: GPT:9289727 != 19775487 Jul 10 00:46:39.803884 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 10 00:46:39.803896 kernel: GPT:9289727 != 19775487 Jul 10 00:46:39.803906 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 10 00:46:39.803917 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:46:39.812664 kernel: cryptd: max_cpu_qlen set to 1000 Jul 10 00:46:39.828681 kernel: AVX2 version of gcm_enc/dec engaged. Jul 10 00:46:39.828712 kernel: AES CTR mode by8 optimization enabled Jul 10 00:46:39.829687 kernel: libata version 3.00 loaded. Jul 10 00:46:39.838944 kernel: ahci 0000:00:1f.2: version 3.0 Jul 10 00:46:39.857481 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 10 00:46:39.857503 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 10 00:46:39.857658 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 10 00:46:39.857758 kernel: scsi host0: ahci Jul 10 00:46:39.857876 kernel: scsi host1: ahci Jul 10 00:46:39.857973 kernel: scsi host2: ahci Jul 10 00:46:39.858062 kernel: scsi host3: ahci Jul 10 00:46:39.858151 kernel: scsi host4: ahci Jul 10 00:46:39.858267 kernel: scsi host5: ahci Jul 10 00:46:39.858367 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 34 Jul 10 00:46:39.858377 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 34 Jul 10 00:46:39.858389 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 34 Jul 10 00:46:39.858398 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 34 Jul 10 00:46:39.858406 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 34 Jul 10 00:46:39.858414 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 34 Jul 10 00:46:39.861026 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 10 00:46:39.900358 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (442) Jul 10 00:46:39.907464 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 10 00:46:39.910583 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 10 00:46:39.917404 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 10 00:46:39.926987 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:46:39.929653 systemd[1]: Starting disk-uuid.service... Jul 10 00:46:39.939189 disk-uuid[535]: Primary Header is updated. Jul 10 00:46:39.939189 disk-uuid[535]: Secondary Entries is updated. Jul 10 00:46:39.939189 disk-uuid[535]: Secondary Header is updated. Jul 10 00:46:39.943654 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:46:39.946656 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:46:40.165669 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 10 00:46:40.165749 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 10 00:46:40.166663 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 10 00:46:40.167676 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 10 00:46:40.168659 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 10 00:46:40.169653 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 10 00:46:40.169688 kernel: ata3.00: applying bridge limits Jul 10 00:46:40.170651 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 10 00:46:40.171668 kernel: ata3.00: configured for UDMA/100 Jul 10 00:46:40.172658 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 10 00:46:40.201664 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 10 00:46:40.218208 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 10 00:46:40.218221 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 10 00:46:40.948538 disk-uuid[536]: The operation has completed successfully. Jul 10 00:46:40.949573 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:46:40.970884 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 10 00:46:40.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:40.970000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:40.970973 systemd[1]: Finished disk-uuid.service. Jul 10 00:46:40.979049 systemd[1]: Starting verity-setup.service... Jul 10 00:46:40.993674 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 10 00:46:41.012980 systemd[1]: Found device dev-mapper-usr.device. Jul 10 00:46:41.015396 systemd[1]: Mounting sysusr-usr.mount... Jul 10 00:46:41.018467 systemd[1]: Finished verity-setup.service. Jul 10 00:46:41.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.075559 systemd[1]: Mounted sysusr-usr.mount. Jul 10 00:46:41.076982 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 10 00:46:41.075974 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 10 00:46:41.076995 systemd[1]: Starting ignition-setup.service... Jul 10 00:46:41.077826 systemd[1]: Starting parse-ip-for-networkd.service... Jul 10 00:46:41.090276 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 00:46:41.090309 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:46:41.090319 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:46:41.098280 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 10 00:46:41.148554 systemd[1]: Finished parse-ip-for-networkd.service. Jul 10 00:46:41.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.155000 audit: BPF prog-id=9 op=LOAD Jul 10 00:46:41.156902 systemd[1]: Starting systemd-networkd.service... Jul 10 00:46:41.177594 systemd-networkd[707]: lo: Link UP Jul 10 00:46:41.177604 systemd-networkd[707]: lo: Gained carrier Jul 10 00:46:41.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.178197 systemd-networkd[707]: Enumeration completed Jul 10 00:46:41.178282 systemd[1]: Started systemd-networkd.service. Jul 10 00:46:41.178471 systemd-networkd[707]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:46:41.180063 systemd[1]: Reached target network.target. Jul 10 00:46:41.180771 systemd-networkd[707]: eth0: Link UP Jul 10 00:46:41.180776 systemd-networkd[707]: eth0: Gained carrier Jul 10 00:46:41.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.182466 systemd[1]: Starting iscsiuio.service... Jul 10 00:46:41.186775 systemd[1]: Started iscsiuio.service. Jul 10 00:46:41.188366 systemd[1]: Starting iscsid.service... Jul 10 00:46:41.191801 iscsid[712]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:46:41.191801 iscsid[712]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 10 00:46:41.191801 iscsid[712]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 10 00:46:41.191801 iscsid[712]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 10 00:46:41.191801 iscsid[712]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:46:41.191801 iscsid[712]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 10 00:46:41.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.193139 systemd[1]: Started iscsid.service. Jul 10 00:46:41.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.194546 systemd[1]: Starting dracut-initqueue.service... Jul 10 00:46:41.203752 systemd-networkd[707]: eth0: DHCPv4 address 10.0.0.142/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:46:41.206549 systemd[1]: Finished dracut-initqueue.service. Jul 10 00:46:41.207529 systemd[1]: Reached target remote-fs-pre.target. Jul 10 00:46:41.208584 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:46:41.210359 systemd[1]: Reached target remote-fs.target. Jul 10 00:46:41.212200 systemd[1]: Starting dracut-pre-mount.service... Jul 10 00:46:41.221116 systemd[1]: Finished dracut-pre-mount.service. Jul 10 00:46:41.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.533691 systemd[1]: Finished ignition-setup.service. Jul 10 00:46:41.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.535410 systemd[1]: Starting ignition-fetch-offline.service... Jul 10 00:46:41.572459 ignition[727]: Ignition 2.14.0 Jul 10 00:46:41.572470 ignition[727]: Stage: fetch-offline Jul 10 00:46:41.572535 ignition[727]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:41.572547 ignition[727]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:41.572698 ignition[727]: parsed url from cmdline: "" Jul 10 00:46:41.572704 ignition[727]: no config URL provided Jul 10 00:46:41.572713 ignition[727]: reading system config file "/usr/lib/ignition/user.ign" Jul 10 00:46:41.572724 ignition[727]: no config at "/usr/lib/ignition/user.ign" Jul 10 00:46:41.572744 ignition[727]: op(1): [started] loading QEMU firmware config module Jul 10 00:46:41.572749 ignition[727]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 10 00:46:41.587667 ignition[727]: op(1): [finished] loading QEMU firmware config module Jul 10 00:46:41.628233 ignition[727]: parsing config with SHA512: 8668db740f799fe5bd39578fcb946ec9bfa08641d1bf8fb9e68964ffa63c40aefc42e2ee89c5955720a4f5e3cf4ee1d3a136d0bc0f85b2383580c0c63745bcd7 Jul 10 00:46:41.635423 unknown[727]: fetched base config from "system" Jul 10 00:46:41.635435 unknown[727]: fetched user config from "qemu" Jul 10 00:46:41.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.635896 ignition[727]: fetch-offline: fetch-offline passed Jul 10 00:46:41.637400 systemd[1]: Finished ignition-fetch-offline.service. Jul 10 00:46:41.635951 ignition[727]: Ignition finished successfully Jul 10 00:46:41.639185 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 10 00:46:41.639950 systemd[1]: Starting ignition-kargs.service... Jul 10 00:46:41.684918 ignition[735]: Ignition 2.14.0 Jul 10 00:46:41.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.702407 systemd[1]: Finished ignition-kargs.service. Jul 10 00:46:41.684925 ignition[735]: Stage: kargs Jul 10 00:46:41.704804 systemd[1]: Starting ignition-disks.service... Jul 10 00:46:41.685013 ignition[735]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:41.685022 ignition[735]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:41.685992 ignition[735]: kargs: kargs passed Jul 10 00:46:41.686030 ignition[735]: Ignition finished successfully Jul 10 00:46:41.711141 ignition[741]: Ignition 2.14.0 Jul 10 00:46:41.711151 ignition[741]: Stage: disks Jul 10 00:46:41.711241 ignition[741]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:41.712673 systemd[1]: Finished ignition-disks.service. Jul 10 00:46:41.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.711251 ignition[741]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:41.714288 systemd[1]: Reached target initrd-root-device.target. Jul 10 00:46:41.712026 ignition[741]: disks: disks passed Jul 10 00:46:41.715745 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:46:41.712060 ignition[741]: Ignition finished successfully Jul 10 00:46:41.716576 systemd[1]: Reached target local-fs.target. Jul 10 00:46:41.718349 systemd[1]: Reached target sysinit.target. Jul 10 00:46:41.718930 systemd[1]: Reached target basic.target. Jul 10 00:46:41.719901 systemd[1]: Starting systemd-fsck-root.service... Jul 10 00:46:41.757254 systemd-fsck[750]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 10 00:46:41.829332 systemd[1]: Finished systemd-fsck-root.service. Jul 10 00:46:41.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.831444 systemd[1]: Mounting sysroot.mount... Jul 10 00:46:41.840671 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 10 00:46:41.841281 systemd[1]: Mounted sysroot.mount. Jul 10 00:46:41.842010 systemd[1]: Reached target initrd-root-fs.target. Jul 10 00:46:41.844705 systemd[1]: Mounting sysroot-usr.mount... Jul 10 00:46:41.846552 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 10 00:46:41.846623 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 10 00:46:41.846672 systemd[1]: Reached target ignition-diskful.target. Jul 10 00:46:41.854541 systemd[1]: Mounted sysroot-usr.mount. Jul 10 00:46:41.856857 systemd[1]: Starting initrd-setup-root.service... Jul 10 00:46:41.863285 initrd-setup-root[760]: cut: /sysroot/etc/passwd: No such file or directory Jul 10 00:46:41.867692 initrd-setup-root[768]: cut: /sysroot/etc/group: No such file or directory Jul 10 00:46:41.871959 initrd-setup-root[776]: cut: /sysroot/etc/shadow: No such file or directory Jul 10 00:46:41.876096 initrd-setup-root[784]: cut: /sysroot/etc/gshadow: No such file or directory Jul 10 00:46:41.902185 systemd[1]: Finished initrd-setup-root.service. Jul 10 00:46:41.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.903348 systemd[1]: Starting ignition-mount.service... Jul 10 00:46:41.905349 systemd[1]: Starting sysroot-boot.service... Jul 10 00:46:41.909112 bash[801]: umount: /sysroot/usr/share/oem: not mounted. Jul 10 00:46:41.916304 ignition[802]: INFO : Ignition 2.14.0 Jul 10 00:46:41.916304 ignition[802]: INFO : Stage: mount Jul 10 00:46:41.918134 ignition[802]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:41.918134 ignition[802]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:41.918134 ignition[802]: INFO : mount: mount passed Jul 10 00:46:41.918134 ignition[802]: INFO : Ignition finished successfully Jul 10 00:46:41.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.918250 systemd[1]: Finished ignition-mount.service. Jul 10 00:46:41.929585 systemd[1]: Finished sysroot-boot.service. Jul 10 00:46:41.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:42.023647 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 00:46:42.032308 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (811) Jul 10 00:46:42.032337 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 00:46:42.032347 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:46:42.033148 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:46:42.039709 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 00:46:42.041585 systemd[1]: Starting ignition-files.service... Jul 10 00:46:42.058255 ignition[831]: INFO : Ignition 2.14.0 Jul 10 00:46:42.058255 ignition[831]: INFO : Stage: files Jul 10 00:46:42.059990 ignition[831]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:42.059990 ignition[831]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:42.059990 ignition[831]: DEBUG : files: compiled without relabeling support, skipping Jul 10 00:46:42.065329 ignition[831]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 10 00:46:42.065329 ignition[831]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 10 00:46:42.073338 ignition[831]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 10 00:46:42.075000 ignition[831]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 10 00:46:42.077047 unknown[831]: wrote ssh authorized keys file for user: core Jul 10 00:46:42.078371 ignition[831]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 10 00:46:42.079897 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 10 00:46:42.079897 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 10 00:46:42.140281 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 10 00:46:42.476731 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 10 00:46:42.476731 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 00:46:42.480608 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Jul 10 00:46:42.598826 systemd-networkd[707]: eth0: Gained IPv6LL Jul 10 00:46:43.066668 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 10 00:46:43.479346 ignition[831]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 00:46:43.479346 ignition[831]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 10 00:46:43.483426 ignition[831]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:46:43.513548 ignition[831]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:46:43.515183 ignition[831]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 10 00:46:43.515183 ignition[831]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:46:43.515183 ignition[831]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:46:43.515183 ignition[831]: INFO : files: files passed Jul 10 00:46:43.515183 ignition[831]: INFO : Ignition finished successfully Jul 10 00:46:43.522116 systemd[1]: Finished ignition-files.service. Jul 10 00:46:43.527299 kernel: kauditd_printk_skb: 24 callbacks suppressed Jul 10 00:46:43.528167 kernel: audit: type=1130 audit(1752108403.521:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.523287 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 10 00:46:43.528190 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 10 00:46:43.532936 initrd-setup-root-after-ignition[854]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 10 00:46:43.538200 kernel: audit: type=1130 audit(1752108403.532:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.528802 systemd[1]: Starting ignition-quench.service... Jul 10 00:46:43.545669 kernel: audit: type=1130 audit(1752108403.537:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.545684 kernel: audit: type=1131 audit(1752108403.537:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.545772 initrd-setup-root-after-ignition[856]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 10 00:46:43.530237 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 10 00:46:43.533114 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 10 00:46:43.533191 systemd[1]: Finished ignition-quench.service. Jul 10 00:46:43.538325 systemd[1]: Reached target ignition-complete.target. Jul 10 00:46:43.546397 systemd[1]: Starting initrd-parse-etc.service... Jul 10 00:46:43.558205 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 10 00:46:43.558282 systemd[1]: Finished initrd-parse-etc.service. Jul 10 00:46:43.566883 kernel: audit: type=1130 audit(1752108403.559:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.566901 kernel: audit: type=1131 audit(1752108403.559:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.559000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.560096 systemd[1]: Reached target initrd-fs.target. Jul 10 00:46:43.566887 systemd[1]: Reached target initrd.target. Jul 10 00:46:43.567670 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 10 00:46:43.568296 systemd[1]: Starting dracut-pre-pivot.service... Jul 10 00:46:43.579138 systemd[1]: Finished dracut-pre-pivot.service. Jul 10 00:46:43.584106 kernel: audit: type=1130 audit(1752108403.579:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.580575 systemd[1]: Starting initrd-cleanup.service... Jul 10 00:46:43.588552 systemd[1]: Stopped target nss-lookup.target. Jul 10 00:46:43.589399 systemd[1]: Stopped target remote-cryptsetup.target. Jul 10 00:46:43.590900 systemd[1]: Stopped target timers.target. Jul 10 00:46:43.592356 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 10 00:46:43.598160 kernel: audit: type=1131 audit(1752108403.593:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.593000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.592460 systemd[1]: Stopped dracut-pre-pivot.service. Jul 10 00:46:43.593893 systemd[1]: Stopped target initrd.target. Jul 10 00:46:43.598229 systemd[1]: Stopped target basic.target. Jul 10 00:46:43.599704 systemd[1]: Stopped target ignition-complete.target. Jul 10 00:46:43.601196 systemd[1]: Stopped target ignition-diskful.target. Jul 10 00:46:43.602755 systemd[1]: Stopped target initrd-root-device.target. Jul 10 00:46:43.604438 systemd[1]: Stopped target remote-fs.target. Jul 10 00:46:43.605984 systemd[1]: Stopped target remote-fs-pre.target. Jul 10 00:46:43.607653 systemd[1]: Stopped target sysinit.target. Jul 10 00:46:43.609057 systemd[1]: Stopped target local-fs.target. Jul 10 00:46:43.610588 systemd[1]: Stopped target local-fs-pre.target. Jul 10 00:46:43.612032 systemd[1]: Stopped target swap.target. Jul 10 00:46:43.619182 kernel: audit: type=1131 audit(1752108403.614:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.613383 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 10 00:46:43.613490 systemd[1]: Stopped dracut-pre-mount.service. Jul 10 00:46:43.625622 kernel: audit: type=1131 audit(1752108403.620:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.614940 systemd[1]: Stopped target cryptsetup.target. Jul 10 00:46:43.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.619315 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 10 00:46:43.619430 systemd[1]: Stopped dracut-initqueue.service. Jul 10 00:46:43.621095 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 10 00:46:43.621186 systemd[1]: Stopped ignition-fetch-offline.service. Jul 10 00:46:43.625782 systemd[1]: Stopped target paths.target. Jul 10 00:46:43.627183 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 10 00:46:43.630681 systemd[1]: Stopped systemd-ask-password-console.path. Jul 10 00:46:43.631753 systemd[1]: Stopped target slices.target. Jul 10 00:46:43.633141 systemd[1]: Stopped target sockets.target. Jul 10 00:46:43.634978 systemd[1]: iscsid.socket: Deactivated successfully. Jul 10 00:46:43.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.635049 systemd[1]: Closed iscsid.socket. Jul 10 00:46:43.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.636503 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 10 00:46:43.636578 systemd[1]: Closed iscsiuio.socket. Jul 10 00:46:43.637930 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 10 00:46:43.638021 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 10 00:46:43.639581 systemd[1]: ignition-files.service: Deactivated successfully. Jul 10 00:46:43.647000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.639684 systemd[1]: Stopped ignition-files.service. Jul 10 00:46:43.650000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.652430 ignition[871]: INFO : Ignition 2.14.0 Jul 10 00:46:43.652430 ignition[871]: INFO : Stage: umount Jul 10 00:46:43.641943 systemd[1]: Stopping ignition-mount.service... Jul 10 00:46:43.654657 ignition[871]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:43.654657 ignition[871]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:43.654657 ignition[871]: INFO : umount: umount passed Jul 10 00:46:43.654657 ignition[871]: INFO : Ignition finished successfully Jul 10 00:46:43.644037 systemd[1]: Stopping sysroot-boot.service... Jul 10 00:46:43.646813 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 10 00:46:43.646994 systemd[1]: Stopped systemd-udev-trigger.service. Jul 10 00:46:43.648642 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 10 00:46:43.648749 systemd[1]: Stopped dracut-pre-trigger.service. Jul 10 00:46:43.663285 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 10 00:46:43.664574 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 10 00:46:43.665489 systemd[1]: Stopped ignition-mount.service. Jul 10 00:46:43.667000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.667389 systemd[1]: Stopped target network.target. Jul 10 00:46:43.668907 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 10 00:46:43.668945 systemd[1]: Stopped ignition-disks.service. Jul 10 00:46:43.671000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.671259 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 10 00:46:43.672000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.671292 systemd[1]: Stopped ignition-kargs.service. Jul 10 00:46:43.672952 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 10 00:46:43.672984 systemd[1]: Stopped ignition-setup.service. Jul 10 00:46:43.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.676041 systemd[1]: Stopping systemd-networkd.service... Jul 10 00:46:43.677677 systemd[1]: Stopping systemd-resolved.service... Jul 10 00:46:43.679307 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 10 00:46:43.679672 systemd-networkd[707]: eth0: DHCPv6 lease lost Jul 10 00:46:43.680242 systemd[1]: Finished initrd-cleanup.service. Jul 10 00:46:43.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.682604 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 10 00:46:43.683596 systemd[1]: Stopped systemd-networkd.service. Jul 10 00:46:43.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.686241 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 10 00:46:43.686273 systemd[1]: Closed systemd-networkd.socket. Jul 10 00:46:43.687000 audit: BPF prog-id=9 op=UNLOAD Jul 10 00:46:43.689162 systemd[1]: Stopping network-cleanup.service... Jul 10 00:46:43.689935 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 10 00:46:43.690760 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 10 00:46:43.693000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.693331 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 10 00:46:43.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.693366 systemd[1]: Stopped systemd-sysctl.service. Jul 10 00:46:43.696143 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 10 00:46:43.696183 systemd[1]: Stopped systemd-modules-load.service. Jul 10 00:46:43.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.698831 systemd[1]: Stopping systemd-udevd.service... Jul 10 00:46:43.701070 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 10 00:46:43.702046 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 10 00:46:43.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.702122 systemd[1]: Stopped systemd-resolved.service. Jul 10 00:46:43.705900 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 10 00:46:43.705979 systemd[1]: Stopped network-cleanup.service. Jul 10 00:46:43.706000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.706000 audit: BPF prog-id=6 op=UNLOAD Jul 10 00:46:43.709998 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 10 00:46:43.710125 systemd[1]: Stopped systemd-udevd.service. Jul 10 00:46:43.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.710713 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 10 00:46:43.710745 systemd[1]: Closed systemd-udevd-control.socket. Jul 10 00:46:43.714034 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 10 00:46:43.715000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.714069 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 10 00:46:43.715561 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 10 00:46:43.715600 systemd[1]: Stopped dracut-pre-udev.service. Jul 10 00:46:43.717470 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 10 00:46:43.717505 systemd[1]: Stopped dracut-cmdline.service. Jul 10 00:46:43.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.721856 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 10 00:46:43.721890 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 10 00:46:43.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.724962 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 10 00:46:43.726652 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 10 00:46:43.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.726696 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 10 00:46:43.728670 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 10 00:46:43.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.729494 systemd[1]: Stopped kmod-static-nodes.service. Jul 10 00:46:43.731273 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 10 00:46:43.731308 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 10 00:46:43.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.735153 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 10 00:46:43.736886 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 10 00:46:43.737812 systemd[1]: Stopped sysroot-boot.service. Jul 10 00:46:43.739000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.739377 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 10 00:46:43.740424 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 10 00:46:43.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.742268 systemd[1]: Reached target initrd-switch-root.target. Jul 10 00:46:43.743987 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 10 00:46:43.744030 systemd[1]: Stopped initrd-setup-root.service. Jul 10 00:46:43.745000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:43.747037 systemd[1]: Starting initrd-switch-root.service... Jul 10 00:46:43.762934 systemd[1]: Switching root. Jul 10 00:46:43.781678 iscsid[712]: iscsid shutting down. Jul 10 00:46:43.782375 systemd-journald[199]: Journal stopped Jul 10 00:46:46.401998 systemd-journald[199]: Received SIGTERM from PID 1 (systemd). Jul 10 00:46:46.402062 kernel: SELinux: Class mctp_socket not defined in policy. Jul 10 00:46:46.402084 kernel: SELinux: Class anon_inode not defined in policy. Jul 10 00:46:46.402096 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 10 00:46:46.402113 kernel: SELinux: policy capability network_peer_controls=1 Jul 10 00:46:46.402125 kernel: SELinux: policy capability open_perms=1 Jul 10 00:46:46.402137 kernel: SELinux: policy capability extended_socket_class=1 Jul 10 00:46:46.402149 kernel: SELinux: policy capability always_check_network=0 Jul 10 00:46:46.402165 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 10 00:46:46.402179 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 10 00:46:46.402192 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 10 00:46:46.402205 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 10 00:46:46.402222 systemd[1]: Successfully loaded SELinux policy in 37.926ms. Jul 10 00:46:46.402246 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.538ms. Jul 10 00:46:46.402263 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:46:46.402276 systemd[1]: Detected virtualization kvm. Jul 10 00:46:46.402288 systemd[1]: Detected architecture x86-64. Jul 10 00:46:46.402304 systemd[1]: Detected first boot. Jul 10 00:46:46.402318 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:46:46.402332 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 10 00:46:46.402346 systemd[1]: Populated /etc with preset unit settings. Jul 10 00:46:46.402361 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:46:46.402391 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:46:46.402406 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:46:46.402422 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 10 00:46:46.402435 systemd[1]: Stopped iscsiuio.service. Jul 10 00:46:46.402447 systemd[1]: iscsid.service: Deactivated successfully. Jul 10 00:46:46.402461 systemd[1]: Stopped iscsid.service. Jul 10 00:46:46.402476 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 10 00:46:46.402489 systemd[1]: Stopped initrd-switch-root.service. Jul 10 00:46:46.402505 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 10 00:46:46.402520 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 10 00:46:46.402535 systemd[1]: Created slice system-addon\x2drun.slice. Jul 10 00:46:46.402548 systemd[1]: Created slice system-getty.slice. Jul 10 00:46:46.402561 systemd[1]: Created slice system-modprobe.slice. Jul 10 00:46:46.402577 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 10 00:46:46.402590 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 10 00:46:46.402603 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 10 00:46:46.402619 systemd[1]: Created slice user.slice. Jul 10 00:46:46.402649 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:46:46.402663 systemd[1]: Started systemd-ask-password-wall.path. Jul 10 00:46:46.402676 systemd[1]: Set up automount boot.automount. Jul 10 00:46:46.402689 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 10 00:46:46.402702 systemd[1]: Stopped target initrd-switch-root.target. Jul 10 00:46:46.402716 systemd[1]: Stopped target initrd-fs.target. Jul 10 00:46:46.402729 systemd[1]: Stopped target initrd-root-fs.target. Jul 10 00:46:46.402746 systemd[1]: Reached target integritysetup.target. Jul 10 00:46:46.402762 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:46:46.402778 systemd[1]: Reached target remote-fs.target. Jul 10 00:46:46.402793 systemd[1]: Reached target slices.target. Jul 10 00:46:46.402807 systemd[1]: Reached target swap.target. Jul 10 00:46:46.402822 systemd[1]: Reached target torcx.target. Jul 10 00:46:46.402837 systemd[1]: Reached target veritysetup.target. Jul 10 00:46:46.402850 systemd[1]: Listening on systemd-coredump.socket. Jul 10 00:46:46.402863 systemd[1]: Listening on systemd-initctl.socket. Jul 10 00:46:46.402876 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:46:46.402894 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:46:46.402907 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:46:46.402920 systemd[1]: Listening on systemd-userdbd.socket. Jul 10 00:46:46.402933 systemd[1]: Mounting dev-hugepages.mount... Jul 10 00:46:46.402946 systemd[1]: Mounting dev-mqueue.mount... Jul 10 00:46:46.402959 systemd[1]: Mounting media.mount... Jul 10 00:46:46.402974 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:46.402989 systemd[1]: Mounting sys-kernel-debug.mount... Jul 10 00:46:46.403003 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 10 00:46:46.403021 systemd[1]: Mounting tmp.mount... Jul 10 00:46:46.403035 systemd[1]: Starting flatcar-tmpfiles.service... Jul 10 00:46:46.403048 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:46:46.403061 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:46:46.403075 systemd[1]: Starting modprobe@configfs.service... Jul 10 00:46:46.403088 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:46:46.403101 systemd[1]: Starting modprobe@drm.service... Jul 10 00:46:46.403114 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:46:46.403127 systemd[1]: Starting modprobe@fuse.service... Jul 10 00:46:46.403145 systemd[1]: Starting modprobe@loop.service... Jul 10 00:46:46.403161 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 10 00:46:46.403176 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 10 00:46:46.403192 systemd[1]: Stopped systemd-fsck-root.service. Jul 10 00:46:46.403205 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 10 00:46:46.403218 systemd[1]: Stopped systemd-fsck-usr.service. Jul 10 00:46:46.403231 systemd[1]: Stopped systemd-journald.service. Jul 10 00:46:46.403244 kernel: loop: module loaded Jul 10 00:46:46.403256 kernel: fuse: init (API version 7.34) Jul 10 00:46:46.403271 systemd[1]: Starting systemd-journald.service... Jul 10 00:46:46.403284 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:46:46.403298 systemd[1]: Starting systemd-network-generator.service... Jul 10 00:46:46.403313 systemd[1]: Starting systemd-remount-fs.service... Jul 10 00:46:46.403328 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:46:46.403342 systemd[1]: verity-setup.service: Deactivated successfully. Jul 10 00:46:46.403355 systemd[1]: Stopped verity-setup.service. Jul 10 00:46:46.403368 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:46.403394 systemd-journald[985]: Journal started Jul 10 00:46:46.403449 systemd-journald[985]: Runtime Journal (/run/log/journal/c33ff1246d3d4be2b7a21a5f52c92db9) is 6.0M, max 48.5M, 42.5M free. Jul 10 00:46:43.840000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 10 00:46:44.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:46:44.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:46:44.144000 audit: BPF prog-id=10 op=LOAD Jul 10 00:46:44.144000 audit: BPF prog-id=10 op=UNLOAD Jul 10 00:46:44.144000 audit: BPF prog-id=11 op=LOAD Jul 10 00:46:44.144000 audit: BPF prog-id=11 op=UNLOAD Jul 10 00:46:44.178000 audit[904]: AVC avc: denied { associate } for pid=904 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 00:46:44.178000 audit[904]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001878cc a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=887 pid=904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:44.178000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:46:44.179000 audit[904]: AVC avc: denied { associate } for pid=904 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 00:46:44.179000 audit[904]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001879a5 a2=1ed a3=0 items=2 ppid=887 pid=904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:44.179000 audit: CWD cwd="/" Jul 10 00:46:44.179000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:44.179000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:44.179000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:46:46.263000 audit: BPF prog-id=12 op=LOAD Jul 10 00:46:46.263000 audit: BPF prog-id=3 op=UNLOAD Jul 10 00:46:46.263000 audit: BPF prog-id=13 op=LOAD Jul 10 00:46:46.263000 audit: BPF prog-id=14 op=LOAD Jul 10 00:46:46.263000 audit: BPF prog-id=4 op=UNLOAD Jul 10 00:46:46.263000 audit: BPF prog-id=5 op=UNLOAD Jul 10 00:46:46.265000 audit: BPF prog-id=15 op=LOAD Jul 10 00:46:46.265000 audit: BPF prog-id=12 op=UNLOAD Jul 10 00:46:46.265000 audit: BPF prog-id=16 op=LOAD Jul 10 00:46:46.265000 audit: BPF prog-id=17 op=LOAD Jul 10 00:46:46.265000 audit: BPF prog-id=13 op=UNLOAD Jul 10 00:46:46.265000 audit: BPF prog-id=14 op=UNLOAD Jul 10 00:46:46.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.278000 audit: BPF prog-id=15 op=UNLOAD Jul 10 00:46:46.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.383000 audit: BPF prog-id=18 op=LOAD Jul 10 00:46:46.383000 audit: BPF prog-id=19 op=LOAD Jul 10 00:46:46.383000 audit: BPF prog-id=20 op=LOAD Jul 10 00:46:46.383000 audit: BPF prog-id=16 op=UNLOAD Jul 10 00:46:46.383000 audit: BPF prog-id=17 op=UNLOAD Jul 10 00:46:46.400000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 10 00:46:46.400000 audit[985]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffe9b190370 a2=4000 a3=7ffe9b19040c items=0 ppid=1 pid=985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:46.400000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 10 00:46:46.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.262476 systemd[1]: Queued start job for default target multi-user.target. Jul 10 00:46:44.177079 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:46:46.262487 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 10 00:46:44.177283 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:46:46.266818 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 10 00:46:44.177301 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:46:44.177329 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 10 00:46:44.177339 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 10 00:46:44.177368 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 10 00:46:44.177381 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 10 00:46:44.177618 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 10 00:46:44.177667 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:46:44.177680 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:46:44.178308 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 10 00:46:44.178341 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 10 00:46:44.178360 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 10 00:46:44.178374 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 10 00:46:44.178390 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 10 00:46:44.178403 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:44Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 10 00:46:46.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.406678 systemd[1]: Started systemd-journald.service. Jul 10 00:46:45.971377 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:45Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:46:45.971655 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:45Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:46:45.971754 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:45Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:46:45.971911 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:45Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:46:45.971958 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:45Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 10 00:46:45.972014 /usr/lib/systemd/system-generators/torcx-generator[904]: time="2025-07-10T00:46:45Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 10 00:46:46.407190 systemd[1]: Mounted dev-hugepages.mount. Jul 10 00:46:46.408067 systemd[1]: Mounted dev-mqueue.mount. Jul 10 00:46:46.408891 systemd[1]: Mounted media.mount. Jul 10 00:46:46.409696 systemd[1]: Mounted sys-kernel-debug.mount. Jul 10 00:46:46.410549 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 10 00:46:46.411538 systemd[1]: Mounted tmp.mount. Jul 10 00:46:46.412544 systemd[1]: Finished flatcar-tmpfiles.service. Jul 10 00:46:46.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.413990 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:46:46.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.415397 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 10 00:46:46.415656 systemd[1]: Finished modprobe@configfs.service. Jul 10 00:46:46.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.417014 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:46:46.417240 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:46:46.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.419000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.418751 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:46:46.418949 systemd[1]: Finished modprobe@drm.service. Jul 10 00:46:46.420210 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:46:46.420424 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:46:46.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.421922 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 10 00:46:46.422150 systemd[1]: Finished modprobe@fuse.service. Jul 10 00:46:46.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.423354 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:46:46.423515 systemd[1]: Finished modprobe@loop.service. Jul 10 00:46:46.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.424742 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:46:46.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.426109 systemd[1]: Finished systemd-network-generator.service. Jul 10 00:46:46.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.427496 systemd[1]: Finished systemd-remount-fs.service. Jul 10 00:46:46.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.428927 systemd[1]: Reached target network-pre.target. Jul 10 00:46:46.431183 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 10 00:46:46.433591 systemd[1]: Mounting sys-kernel-config.mount... Jul 10 00:46:46.434930 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 10 00:46:46.436504 systemd[1]: Starting systemd-hwdb-update.service... Jul 10 00:46:46.439050 systemd[1]: Starting systemd-journal-flush.service... Jul 10 00:46:46.440415 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:46:46.442028 systemd[1]: Starting systemd-random-seed.service... Jul 10 00:46:46.443321 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:46:46.444223 systemd-journald[985]: Time spent on flushing to /var/log/journal/c33ff1246d3d4be2b7a21a5f52c92db9 is 14.343ms for 1096 entries. Jul 10 00:46:46.444223 systemd-journald[985]: System Journal (/var/log/journal/c33ff1246d3d4be2b7a21a5f52c92db9) is 8.0M, max 195.6M, 187.6M free. Jul 10 00:46:46.730011 systemd-journald[985]: Received client request to flush runtime journal. Jul 10 00:46:46.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.513000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.519000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:46.444868 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:46:46.448291 systemd[1]: Starting systemd-sysusers.service... Jul 10 00:46:46.452607 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 10 00:46:46.453960 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:46:46.731156 udevadm[1007]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 10 00:46:46.455065 systemd[1]: Mounted sys-kernel-config.mount. Jul 10 00:46:46.457088 systemd[1]: Starting systemd-udev-settle.service... Jul 10 00:46:46.512884 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:46:46.519021 systemd[1]: Finished systemd-sysusers.service. Jul 10 00:46:46.521339 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:46:46.539081 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:46:46.709515 systemd[1]: Finished systemd-random-seed.service. Jul 10 00:46:46.710687 systemd[1]: Reached target first-boot-complete.target. Jul 10 00:46:46.730946 systemd[1]: Finished systemd-journal-flush.service. Jul 10 00:46:46.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.022249 systemd[1]: Finished systemd-hwdb-update.service. Jul 10 00:46:47.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.023000 audit: BPF prog-id=21 op=LOAD Jul 10 00:46:47.023000 audit: BPF prog-id=22 op=LOAD Jul 10 00:46:47.023000 audit: BPF prog-id=7 op=UNLOAD Jul 10 00:46:47.023000 audit: BPF prog-id=8 op=UNLOAD Jul 10 00:46:47.024589 systemd[1]: Starting systemd-udevd.service... Jul 10 00:46:47.040160 systemd-udevd[1012]: Using default interface naming scheme 'v252'. Jul 10 00:46:47.054314 systemd[1]: Started systemd-udevd.service. Jul 10 00:46:47.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.055000 audit: BPF prog-id=23 op=LOAD Jul 10 00:46:47.056580 systemd[1]: Starting systemd-networkd.service... Jul 10 00:46:47.062000 audit: BPF prog-id=24 op=LOAD Jul 10 00:46:47.062000 audit: BPF prog-id=25 op=LOAD Jul 10 00:46:47.062000 audit: BPF prog-id=26 op=LOAD Jul 10 00:46:47.063810 systemd[1]: Starting systemd-userdbd.service... Jul 10 00:46:47.090792 systemd[1]: Started systemd-userdbd.service. Jul 10 00:46:47.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.102222 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 10 00:46:47.110725 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:46:47.136660 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 10 00:46:47.139403 systemd-networkd[1019]: lo: Link UP Jul 10 00:46:47.139413 systemd-networkd[1019]: lo: Gained carrier Jul 10 00:46:47.139887 systemd-networkd[1019]: Enumeration completed Jul 10 00:46:47.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.139984 systemd[1]: Started systemd-networkd.service. Jul 10 00:46:47.140012 systemd-networkd[1019]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:46:47.141430 systemd-networkd[1019]: eth0: Link UP Jul 10 00:46:47.141440 systemd-networkd[1019]: eth0: Gained carrier Jul 10 00:46:47.142656 kernel: ACPI: button: Power Button [PWRF] Jul 10 00:46:47.153790 systemd-networkd[1019]: eth0: DHCPv4 address 10.0.0.142/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:46:47.153000 audit[1022]: AVC avc: denied { confidentiality } for pid=1022 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 10 00:46:47.153000 audit[1022]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=56003fa9fe00 a1=338ac a2=7fbc01a87bc5 a3=5 items=110 ppid=1012 pid=1022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:47.153000 audit: CWD cwd="/" Jul 10 00:46:47.153000 audit: PATH item=0 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=1 name=(null) inode=15383 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=2 name=(null) inode=15383 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=3 name=(null) inode=15384 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=4 name=(null) inode=15383 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=5 name=(null) inode=15385 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=6 name=(null) inode=15383 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=7 name=(null) inode=15386 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=8 name=(null) inode=15386 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=9 name=(null) inode=15387 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=10 name=(null) inode=15386 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=11 name=(null) inode=15388 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=12 name=(null) inode=15386 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=13 name=(null) inode=15389 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=14 name=(null) inode=15386 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=15 name=(null) inode=15390 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=16 name=(null) inode=15386 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=17 name=(null) inode=15391 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=18 name=(null) inode=15383 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=19 name=(null) inode=15392 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=20 name=(null) inode=15392 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=21 name=(null) inode=15393 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=22 name=(null) inode=15392 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=23 name=(null) inode=15394 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=24 name=(null) inode=15392 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=25 name=(null) inode=15395 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=26 name=(null) inode=15392 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=27 name=(null) inode=15396 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=28 name=(null) inode=15392 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=29 name=(null) inode=15397 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=30 name=(null) inode=15383 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=31 name=(null) inode=15398 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=32 name=(null) inode=15398 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=33 name=(null) inode=15399 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=34 name=(null) inode=15398 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=35 name=(null) inode=15400 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=36 name=(null) inode=15398 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=37 name=(null) inode=15401 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=38 name=(null) inode=15398 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=39 name=(null) inode=15402 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=40 name=(null) inode=15398 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=41 name=(null) inode=15403 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=42 name=(null) inode=15383 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=43 name=(null) inode=15404 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=44 name=(null) inode=15404 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=45 name=(null) inode=15405 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=46 name=(null) inode=15404 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=47 name=(null) inode=15406 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=48 name=(null) inode=15404 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=49 name=(null) inode=15407 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=50 name=(null) inode=15404 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=51 name=(null) inode=15408 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=52 name=(null) inode=15404 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=53 name=(null) inode=15409 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.170688 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 10 00:46:47.178934 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 10 00:46:47.179561 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 10 00:46:47.153000 audit: PATH item=54 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=55 name=(null) inode=15410 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=56 name=(null) inode=15410 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=57 name=(null) inode=15411 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=58 name=(null) inode=15410 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=59 name=(null) inode=15412 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=60 name=(null) inode=15410 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=61 name=(null) inode=15413 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=62 name=(null) inode=15413 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=63 name=(null) inode=15414 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=64 name=(null) inode=15413 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=65 name=(null) inode=15415 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=66 name=(null) inode=15413 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=67 name=(null) inode=15416 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=68 name=(null) inode=15413 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=69 name=(null) inode=15417 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=70 name=(null) inode=15413 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=71 name=(null) inode=15418 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=72 name=(null) inode=15410 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=73 name=(null) inode=15419 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=74 name=(null) inode=15419 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=75 name=(null) inode=15420 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=76 name=(null) inode=15419 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=77 name=(null) inode=15421 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=78 name=(null) inode=15419 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=79 name=(null) inode=15422 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=80 name=(null) inode=15419 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=81 name=(null) inode=15423 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=82 name=(null) inode=15419 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=83 name=(null) inode=15424 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=84 name=(null) inode=15410 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=85 name=(null) inode=15425 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=86 name=(null) inode=15425 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=87 name=(null) inode=15426 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=88 name=(null) inode=15425 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=89 name=(null) inode=15427 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=90 name=(null) inode=15425 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=91 name=(null) inode=15428 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=92 name=(null) inode=15425 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=93 name=(null) inode=15429 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=94 name=(null) inode=15425 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=95 name=(null) inode=15430 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=96 name=(null) inode=15410 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=97 name=(null) inode=15431 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=98 name=(null) inode=15431 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=99 name=(null) inode=15432 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=100 name=(null) inode=15431 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=101 name=(null) inode=15433 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=102 name=(null) inode=15431 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=103 name=(null) inode=15434 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=104 name=(null) inode=15431 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=105 name=(null) inode=15435 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=106 name=(null) inode=15431 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=107 name=(null) inode=15436 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.182676 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 10 00:46:47.153000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PATH item=109 name=(null) inode=14580 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:47.153000 audit: PROCTITLE proctitle="(udev-worker)" Jul 10 00:46:47.185658 kernel: mousedev: PS/2 mouse device common for all mice Jul 10 00:46:47.249120 kernel: kvm: Nested Virtualization enabled Jul 10 00:46:47.249215 kernel: SVM: kvm: Nested Paging enabled Jul 10 00:46:47.249230 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 10 00:46:47.249892 kernel: SVM: Virtual GIF supported Jul 10 00:46:47.265653 kernel: EDAC MC: Ver: 3.0.0 Jul 10 00:46:47.290005 systemd[1]: Finished systemd-udev-settle.service. Jul 10 00:46:47.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.292129 systemd[1]: Starting lvm2-activation-early.service... Jul 10 00:46:47.299200 lvm[1048]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:46:47.327294 systemd[1]: Finished lvm2-activation-early.service. Jul 10 00:46:47.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.328414 systemd[1]: Reached target cryptsetup.target. Jul 10 00:46:47.330343 systemd[1]: Starting lvm2-activation.service... Jul 10 00:46:47.333638 lvm[1049]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:46:47.361234 systemd[1]: Finished lvm2-activation.service. Jul 10 00:46:47.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.362212 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:46:47.363100 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 10 00:46:47.363123 systemd[1]: Reached target local-fs.target. Jul 10 00:46:47.363989 systemd[1]: Reached target machines.target. Jul 10 00:46:47.365869 systemd[1]: Starting ldconfig.service... Jul 10 00:46:47.366967 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.367011 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:47.367993 systemd[1]: Starting systemd-boot-update.service... Jul 10 00:46:47.370041 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 10 00:46:47.372537 systemd[1]: Starting systemd-machine-id-commit.service... Jul 10 00:46:47.375504 systemd[1]: Starting systemd-sysext.service... Jul 10 00:46:47.377391 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 10 00:46:47.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.380000 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1051 (bootctl) Jul 10 00:46:47.381106 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 10 00:46:47.391921 systemd[1]: Unmounting usr-share-oem.mount... Jul 10 00:46:47.396002 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 10 00:46:47.396207 systemd[1]: Unmounted usr-share-oem.mount. Jul 10 00:46:47.406860 kernel: loop0: detected capacity change from 0 to 221472 Jul 10 00:46:47.429111 systemd-fsck[1059]: fsck.fat 4.2 (2021-01-31) Jul 10 00:46:47.429111 systemd-fsck[1059]: /dev/vda1: 790 files, 120731/258078 clusters Jul 10 00:46:47.430338 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 10 00:46:47.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.432796 systemd[1]: Mounting boot.mount... Jul 10 00:46:47.644881 systemd[1]: Mounted boot.mount. Jul 10 00:46:47.652658 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 10 00:46:47.658263 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 10 00:46:47.658901 systemd[1]: Finished systemd-machine-id-commit.service. Jul 10 00:46:47.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.661062 systemd[1]: Finished systemd-boot-update.service. Jul 10 00:46:47.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.669649 kernel: loop1: detected capacity change from 0 to 221472 Jul 10 00:46:47.673357 (sd-sysext)[1064]: Using extensions 'kubernetes'. Jul 10 00:46:47.673773 (sd-sysext)[1064]: Merged extensions into '/usr'. Jul 10 00:46:47.693194 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:47.695239 systemd[1]: Mounting usr-share-oem.mount... Jul 10 00:46:47.696219 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.697676 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:46:47.700477 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:46:47.702699 systemd[1]: Starting modprobe@loop.service... Jul 10 00:46:47.703622 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.703835 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:47.704004 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:47.707559 systemd[1]: Mounted usr-share-oem.mount. Jul 10 00:46:47.709012 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:46:47.709214 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:46:47.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.710581 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:46:47.710742 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:46:47.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.711000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.712045 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:46:47.712165 systemd[1]: Finished modprobe@loop.service. Jul 10 00:46:47.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.713579 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:46:47.714575 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.714874 systemd[1]: Finished systemd-sysext.service. Jul 10 00:46:47.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.717768 systemd[1]: Starting ensure-sysext.service... Jul 10 00:46:47.719468 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 10 00:46:47.724799 systemd[1]: Reloading. Jul 10 00:46:47.725732 ldconfig[1050]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 10 00:46:47.729661 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 00:46:47.731115 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 00:46:47.732522 systemd-tmpfiles[1071]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 00:46:47.780162 /usr/lib/systemd/system-generators/torcx-generator[1090]: time="2025-07-10T00:46:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:46:47.780189 /usr/lib/systemd/system-generators/torcx-generator[1090]: time="2025-07-10T00:46:47Z" level=info msg="torcx already run" Jul 10 00:46:47.837841 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:46:47.837859 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:46:47.855368 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:46:47.905000 audit: BPF prog-id=27 op=LOAD Jul 10 00:46:47.905000 audit: BPF prog-id=18 op=UNLOAD Jul 10 00:46:47.905000 audit: BPF prog-id=28 op=LOAD Jul 10 00:46:47.905000 audit: BPF prog-id=29 op=LOAD Jul 10 00:46:47.905000 audit: BPF prog-id=19 op=UNLOAD Jul 10 00:46:47.906000 audit: BPF prog-id=20 op=UNLOAD Jul 10 00:46:47.906000 audit: BPF prog-id=30 op=LOAD Jul 10 00:46:47.906000 audit: BPF prog-id=31 op=LOAD Jul 10 00:46:47.906000 audit: BPF prog-id=21 op=UNLOAD Jul 10 00:46:47.906000 audit: BPF prog-id=22 op=UNLOAD Jul 10 00:46:47.908000 audit: BPF prog-id=32 op=LOAD Jul 10 00:46:47.908000 audit: BPF prog-id=23 op=UNLOAD Jul 10 00:46:47.909000 audit: BPF prog-id=33 op=LOAD Jul 10 00:46:47.909000 audit: BPF prog-id=24 op=UNLOAD Jul 10 00:46:47.910000 audit: BPF prog-id=34 op=LOAD Jul 10 00:46:47.910000 audit: BPF prog-id=35 op=LOAD Jul 10 00:46:47.910000 audit: BPF prog-id=25 op=UNLOAD Jul 10 00:46:47.910000 audit: BPF prog-id=26 op=UNLOAD Jul 10 00:46:47.913161 systemd[1]: Finished ldconfig.service. Jul 10 00:46:47.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.915121 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 10 00:46:47.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.918896 systemd[1]: Starting audit-rules.service... Jul 10 00:46:47.920961 systemd[1]: Starting clean-ca-certificates.service... Jul 10 00:46:47.923318 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 10 00:46:47.925000 audit: BPF prog-id=36 op=LOAD Jul 10 00:46:47.926575 systemd[1]: Starting systemd-resolved.service... Jul 10 00:46:47.927000 audit: BPF prog-id=37 op=LOAD Jul 10 00:46:47.929387 systemd[1]: Starting systemd-timesyncd.service... Jul 10 00:46:47.931572 systemd[1]: Starting systemd-update-utmp.service... Jul 10 00:46:47.933359 systemd[1]: Finished clean-ca-certificates.service. Jul 10 00:46:47.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.935000 audit[1145]: SYSTEM_BOOT pid=1145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.939123 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:46:47.942103 systemd[1]: Finished systemd-update-utmp.service. Jul 10 00:46:47.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.943453 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 10 00:46:47.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:47.945418 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:47.945707 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.946956 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:46:47.948836 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:46:47.950231 augenrules[1155]: No rules Jul 10 00:46:47.949000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 10 00:46:47.949000 audit[1155]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe814624a0 a2=420 a3=0 items=0 ppid=1133 pid=1155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:47.949000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 10 00:46:47.950767 systemd[1]: Starting modprobe@loop.service... Jul 10 00:46:47.951550 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.951660 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:47.952777 systemd[1]: Starting systemd-update-done.service... Jul 10 00:46:47.953684 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:46:47.953768 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:47.954701 systemd[1]: Finished audit-rules.service. Jul 10 00:46:47.955895 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:46:47.956003 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:46:47.957152 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:46:47.957253 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:46:47.958780 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:46:47.958882 systemd[1]: Finished modprobe@loop.service. Jul 10 00:46:47.960020 systemd[1]: Finished systemd-update-done.service. Jul 10 00:46:47.962258 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:47.962441 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.963529 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:46:47.965264 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:46:47.966897 systemd[1]: Starting modprobe@loop.service... Jul 10 00:46:47.967677 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.967772 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:47.967853 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:46:47.967916 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:47.968733 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:46:47.968843 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:46:47.970125 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:46:47.970260 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:46:47.971510 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:46:47.971659 systemd[1]: Finished modprobe@loop.service. Jul 10 00:46:47.972852 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:46:47.972982 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.975238 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:47.975432 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.976421 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:46:47.978020 systemd[1]: Starting modprobe@drm.service... Jul 10 00:46:47.979947 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:46:47.981833 systemd[1]: Starting modprobe@loop.service... Jul 10 00:46:47.982600 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:46:47.982741 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:47.983795 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 10 00:46:47.985834 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:46:47.985983 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:48.406513 systemd-timesyncd[1143]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 10 00:46:48.406562 systemd-timesyncd[1143]: Initial clock synchronization to Thu 2025-07-10 00:46:48.406394 UTC. Jul 10 00:46:48.407023 systemd[1]: Started systemd-timesyncd.service. Jul 10 00:46:48.408167 systemd-resolved[1142]: Positive Trust Anchors: Jul 10 00:46:48.408180 systemd-resolved[1142]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:46:48.408205 systemd-resolved[1142]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:46:48.408587 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:46:48.408761 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:46:48.410094 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:46:48.410212 systemd[1]: Finished modprobe@drm.service. Jul 10 00:46:48.411455 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:46:48.411568 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:46:48.412944 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:46:48.413063 systemd[1]: Finished modprobe@loop.service. Jul 10 00:46:48.414534 systemd[1]: Reached target time-set.target. Jul 10 00:46:48.415408 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:46:48.415451 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:46:48.415732 systemd[1]: Finished ensure-sysext.service. Jul 10 00:46:48.415994 systemd-resolved[1142]: Defaulting to hostname 'linux'. Jul 10 00:46:48.417358 systemd[1]: Started systemd-resolved.service. Jul 10 00:46:48.418205 systemd[1]: Reached target network.target. Jul 10 00:46:48.419050 systemd[1]: Reached target nss-lookup.target. Jul 10 00:46:48.419865 systemd[1]: Reached target sysinit.target. Jul 10 00:46:48.420677 systemd[1]: Started motdgen.path. Jul 10 00:46:48.421350 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 10 00:46:48.422542 systemd[1]: Started logrotate.timer. Jul 10 00:46:48.423317 systemd[1]: Started mdadm.timer. Jul 10 00:46:48.423971 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 10 00:46:48.424778 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 10 00:46:48.424796 systemd[1]: Reached target paths.target. Jul 10 00:46:48.425498 systemd[1]: Reached target timers.target. Jul 10 00:46:48.426488 systemd[1]: Listening on dbus.socket. Jul 10 00:46:48.428116 systemd[1]: Starting docker.socket... Jul 10 00:46:48.430881 systemd[1]: Listening on sshd.socket. Jul 10 00:46:48.431667 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:48.432021 systemd[1]: Listening on docker.socket. Jul 10 00:46:48.432811 systemd[1]: Reached target sockets.target. Jul 10 00:46:48.433563 systemd[1]: Reached target basic.target. Jul 10 00:46:48.434299 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:46:48.434317 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:46:48.435197 systemd[1]: Starting containerd.service... Jul 10 00:46:48.436637 systemd[1]: Starting dbus.service... Jul 10 00:46:48.438029 systemd[1]: Starting enable-oem-cloudinit.service... Jul 10 00:46:48.439862 systemd[1]: Starting extend-filesystems.service... Jul 10 00:46:48.440837 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 10 00:46:48.442083 systemd[1]: Starting motdgen.service... Jul 10 00:46:48.443631 jq[1176]: false Jul 10 00:46:48.444740 systemd[1]: Starting prepare-helm.service... Jul 10 00:46:48.446534 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 10 00:46:48.448380 systemd[1]: Starting sshd-keygen.service... Jul 10 00:46:48.455557 extend-filesystems[1177]: Found loop1 Jul 10 00:46:48.455557 extend-filesystems[1177]: Found sr0 Jul 10 00:46:48.455557 extend-filesystems[1177]: Found vda Jul 10 00:46:48.455557 extend-filesystems[1177]: Found vda1 Jul 10 00:46:48.455557 extend-filesystems[1177]: Found vda2 Jul 10 00:46:48.455557 extend-filesystems[1177]: Found vda3 Jul 10 00:46:48.455557 extend-filesystems[1177]: Found usr Jul 10 00:46:48.455557 extend-filesystems[1177]: Found vda4 Jul 10 00:46:48.455557 extend-filesystems[1177]: Found vda6 Jul 10 00:46:48.455557 extend-filesystems[1177]: Found vda7 Jul 10 00:46:48.455557 extend-filesystems[1177]: Found vda9 Jul 10 00:46:48.455557 extend-filesystems[1177]: Checking size of /dev/vda9 Jul 10 00:46:48.506595 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 10 00:46:48.453599 systemd[1]: Starting systemd-logind.service... Jul 10 00:46:48.506737 extend-filesystems[1177]: Resized partition /dev/vda9 Jul 10 00:46:48.457981 dbus-daemon[1175]: [system] SELinux support is enabled Jul 10 00:46:48.454488 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:48.528671 extend-filesystems[1222]: resize2fs 1.46.5 (30-Dec-2021) Jul 10 00:46:48.454543 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 10 00:46:48.529970 update_engine[1192]: I0710 00:46:48.507895 1192 main.cc:92] Flatcar Update Engine starting Jul 10 00:46:48.529970 update_engine[1192]: I0710 00:46:48.509995 1192 update_check_scheduler.cc:74] Next update check in 6m44s Jul 10 00:46:48.454912 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 10 00:46:48.530240 jq[1194]: true Jul 10 00:46:48.455525 systemd[1]: Starting update-engine.service... Jul 10 00:46:48.530691 tar[1197]: linux-amd64/helm Jul 10 00:46:48.457406 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 10 00:46:48.459311 systemd[1]: Started dbus.service. Jul 10 00:46:48.531117 jq[1201]: true Jul 10 00:46:48.462996 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 10 00:46:48.531448 env[1202]: time="2025-07-10T00:46:48.525156876Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 10 00:46:48.463283 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 10 00:46:48.464161 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 10 00:46:48.464371 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 10 00:46:48.468914 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 10 00:46:48.554077 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 10 00:46:48.554142 env[1202]: time="2025-07-10T00:46:48.546759078Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 10 00:46:48.468944 systemd[1]: Reached target system-config.target. Jul 10 00:46:48.469929 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 10 00:46:48.469950 systemd[1]: Reached target user-config.target. Jul 10 00:46:48.496407 systemd[1]: motdgen.service: Deactivated successfully. Jul 10 00:46:48.496596 systemd[1]: Finished motdgen.service. Jul 10 00:46:48.509949 systemd[1]: Started update-engine.service. Jul 10 00:46:48.512935 systemd[1]: Started locksmithd.service. Jul 10 00:46:48.554451 systemd-logind[1190]: Watching system buttons on /dev/input/event1 (Power Button) Jul 10 00:46:48.554474 systemd-logind[1190]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 10 00:46:48.554855 extend-filesystems[1222]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 10 00:46:48.554855 extend-filesystems[1222]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 10 00:46:48.554855 extend-filesystems[1222]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 10 00:46:48.570520 extend-filesystems[1177]: Resized filesystem in /dev/vda9 Jul 10 00:46:48.572103 bash[1226]: Updated "/home/core/.ssh/authorized_keys" Jul 10 00:46:48.555056 systemd-logind[1190]: New seat seat0. Jul 10 00:46:48.572238 env[1202]: time="2025-07-10T00:46:48.557985582Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:48.572238 env[1202]: time="2025-07-10T00:46:48.559308373Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:46:48.572238 env[1202]: time="2025-07-10T00:46:48.559330795Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:48.572238 env[1202]: time="2025-07-10T00:46:48.559535659Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:46:48.572238 env[1202]: time="2025-07-10T00:46:48.559553021Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:48.572238 env[1202]: time="2025-07-10T00:46:48.559564303Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 10 00:46:48.572238 env[1202]: time="2025-07-10T00:46:48.559572869Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:48.572238 env[1202]: time="2025-07-10T00:46:48.559716248Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:48.572238 env[1202]: time="2025-07-10T00:46:48.559916203Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:48.572238 env[1202]: time="2025-07-10T00:46:48.560034494Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:46:48.555919 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.560056145Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.560108904Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.560122349Z" level=info msg="metadata content store policy set" policy=shared Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566613623Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566638129Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566651073Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566679516Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566692080Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566721214Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566733648Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566745931Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566758765Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566771889Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 10 00:46:48.572585 env[1202]: time="2025-07-10T00:46:48.566783531Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 10 00:46:48.556076 systemd[1]: Finished extend-filesystems.service. Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.566795664Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.566868951Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.566934064Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.567144578Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.567164666Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.567176769Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.567224298Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.567235369Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.567248072Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.567257821Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.567269102Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.567280493Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.568051950Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.572911 env[1202]: time="2025-07-10T00:46:48.568072458Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.566581 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 10 00:46:48.573221 env[1202]: time="2025-07-10T00:46:48.568087817Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 10 00:46:48.573221 env[1202]: time="2025-07-10T00:46:48.568200208Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.573221 env[1202]: time="2025-07-10T00:46:48.568214735Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.573221 env[1202]: time="2025-07-10T00:46:48.568225916Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.573221 env[1202]: time="2025-07-10T00:46:48.568235955Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 10 00:46:48.573221 env[1202]: time="2025-07-10T00:46:48.568248639Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 10 00:46:48.573221 env[1202]: time="2025-07-10T00:46:48.568257656Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 10 00:46:48.573221 env[1202]: time="2025-07-10T00:46:48.568275579Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 10 00:46:48.573221 env[1202]: time="2025-07-10T00:46:48.568305926Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 10 00:46:48.569471 systemd[1]: Started containerd.service. Jul 10 00:46:48.572114 systemd[1]: Started systemd-logind.service. Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.568485713Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.568532441Z" level=info msg="Connect containerd service" Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.568562768Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.569086380Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.569213057Z" level=info msg="Start subscribing containerd event" Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.569263512Z" level=info msg="Start recovering state" Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.569314808Z" level=info msg="Start event monitor" Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.569328374Z" level=info msg="Start snapshots syncer" Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.569337741Z" level=info msg="Start cni network conf syncer for default" Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.569346758Z" level=info msg="Start streaming server" Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.569360083Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 10 00:46:48.573461 env[1202]: time="2025-07-10T00:46:48.569390009Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 10 00:46:48.574474 env[1202]: time="2025-07-10T00:46:48.574450970Z" level=info msg="containerd successfully booted in 0.058535s" Jul 10 00:46:48.584343 locksmithd[1227]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 10 00:46:48.803458 sshd_keygen[1193]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 10 00:46:48.821045 systemd[1]: Finished sshd-keygen.service. Jul 10 00:46:48.823468 systemd[1]: Starting issuegen.service... Jul 10 00:46:48.828365 systemd[1]: issuegen.service: Deactivated successfully. Jul 10 00:46:48.828511 systemd[1]: Finished issuegen.service. Jul 10 00:46:48.830519 systemd[1]: Starting systemd-user-sessions.service... Jul 10 00:46:48.836175 systemd[1]: Finished systemd-user-sessions.service. Jul 10 00:46:48.838293 systemd[1]: Started getty@tty1.service. Jul 10 00:46:48.840436 systemd[1]: Started serial-getty@ttyS0.service. Jul 10 00:46:48.841531 systemd[1]: Reached target getty.target. Jul 10 00:46:48.882249 tar[1197]: linux-amd64/LICENSE Jul 10 00:46:48.882346 tar[1197]: linux-amd64/README.md Jul 10 00:46:48.886608 systemd[1]: Finished prepare-helm.service. Jul 10 00:46:49.482862 systemd-networkd[1019]: eth0: Gained IPv6LL Jul 10 00:46:49.484642 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 10 00:46:49.486047 systemd[1]: Reached target network-online.target. Jul 10 00:46:49.488317 systemd[1]: Starting kubelet.service... Jul 10 00:46:50.228165 systemd[1]: Started kubelet.service. Jul 10 00:46:50.229540 systemd[1]: Reached target multi-user.target. Jul 10 00:46:50.231766 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 10 00:46:50.238280 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 10 00:46:50.238473 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 10 00:46:50.241783 systemd[1]: Startup finished in 852ms (kernel) + 4.898s (initrd) + 6.020s (userspace) = 11.772s. Jul 10 00:46:50.620304 kubelet[1256]: E0710 00:46:50.620189 1256 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:46:50.622167 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:46:50.622287 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:46:51.973561 systemd[1]: Created slice system-sshd.slice. Jul 10 00:46:51.974653 systemd[1]: Started sshd@0-10.0.0.142:22-10.0.0.1:55748.service. Jul 10 00:46:52.016140 sshd[1265]: Accepted publickey for core from 10.0.0.1 port 55748 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:46:52.017912 sshd[1265]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:52.027333 systemd-logind[1190]: New session 1 of user core. Jul 10 00:46:52.028417 systemd[1]: Created slice user-500.slice. Jul 10 00:46:52.029553 systemd[1]: Starting user-runtime-dir@500.service... Jul 10 00:46:52.038152 systemd[1]: Finished user-runtime-dir@500.service. Jul 10 00:46:52.039633 systemd[1]: Starting user@500.service... Jul 10 00:46:52.043176 (systemd)[1268]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:52.123184 systemd[1268]: Queued start job for default target default.target. Jul 10 00:46:52.123608 systemd[1268]: Reached target paths.target. Jul 10 00:46:52.123629 systemd[1268]: Reached target sockets.target. Jul 10 00:46:52.123642 systemd[1268]: Reached target timers.target. Jul 10 00:46:52.123653 systemd[1268]: Reached target basic.target. Jul 10 00:46:52.123687 systemd[1268]: Reached target default.target. Jul 10 00:46:52.123724 systemd[1268]: Startup finished in 73ms. Jul 10 00:46:52.123803 systemd[1]: Started user@500.service. Jul 10 00:46:52.124764 systemd[1]: Started session-1.scope. Jul 10 00:46:52.177360 systemd[1]: Started sshd@1-10.0.0.142:22-10.0.0.1:55758.service. Jul 10 00:46:52.214546 sshd[1277]: Accepted publickey for core from 10.0.0.1 port 55758 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:46:52.215800 sshd[1277]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:52.219576 systemd-logind[1190]: New session 2 of user core. Jul 10 00:46:52.220552 systemd[1]: Started session-2.scope. Jul 10 00:46:52.274769 sshd[1277]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:52.277545 systemd[1]: sshd@1-10.0.0.142:22-10.0.0.1:55758.service: Deactivated successfully. Jul 10 00:46:52.278206 systemd[1]: session-2.scope: Deactivated successfully. Jul 10 00:46:52.278870 systemd-logind[1190]: Session 2 logged out. Waiting for processes to exit. Jul 10 00:46:52.280121 systemd[1]: Started sshd@2-10.0.0.142:22-10.0.0.1:55774.service. Jul 10 00:46:52.280904 systemd-logind[1190]: Removed session 2. Jul 10 00:46:52.316105 sshd[1283]: Accepted publickey for core from 10.0.0.1 port 55774 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:46:52.317252 sshd[1283]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:52.321071 systemd-logind[1190]: New session 3 of user core. Jul 10 00:46:52.321926 systemd[1]: Started session-3.scope. Jul 10 00:46:52.371876 sshd[1283]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:52.374679 systemd[1]: sshd@2-10.0.0.142:22-10.0.0.1:55774.service: Deactivated successfully. Jul 10 00:46:52.375277 systemd[1]: session-3.scope: Deactivated successfully. Jul 10 00:46:52.375873 systemd-logind[1190]: Session 3 logged out. Waiting for processes to exit. Jul 10 00:46:52.376991 systemd[1]: Started sshd@3-10.0.0.142:22-10.0.0.1:55788.service. Jul 10 00:46:52.377729 systemd-logind[1190]: Removed session 3. Jul 10 00:46:52.411866 sshd[1289]: Accepted publickey for core from 10.0.0.1 port 55788 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:46:52.412803 sshd[1289]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:52.415920 systemd-logind[1190]: New session 4 of user core. Jul 10 00:46:52.416680 systemd[1]: Started session-4.scope. Jul 10 00:46:52.468372 sshd[1289]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:52.470678 systemd[1]: sshd@3-10.0.0.142:22-10.0.0.1:55788.service: Deactivated successfully. Jul 10 00:46:52.471142 systemd[1]: session-4.scope: Deactivated successfully. Jul 10 00:46:52.471562 systemd-logind[1190]: Session 4 logged out. Waiting for processes to exit. Jul 10 00:46:52.472475 systemd[1]: Started sshd@4-10.0.0.142:22-10.0.0.1:55792.service. Jul 10 00:46:52.473067 systemd-logind[1190]: Removed session 4. Jul 10 00:46:52.507987 sshd[1295]: Accepted publickey for core from 10.0.0.1 port 55792 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:46:52.509034 sshd[1295]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:52.511755 systemd-logind[1190]: New session 5 of user core. Jul 10 00:46:52.512455 systemd[1]: Started session-5.scope. Jul 10 00:46:52.566179 sudo[1299]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 10 00:46:52.566396 sudo[1299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:46:52.571871 dbus-daemon[1175]: \xd0\u000dP\xc4\xcdU: received setenforce notice (enforcing=296244288) Jul 10 00:46:52.574696 sudo[1299]: pam_unix(sudo:session): session closed for user root Jul 10 00:46:52.576414 sshd[1295]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:52.579598 systemd[1]: Started sshd@5-10.0.0.142:22-10.0.0.1:55806.service. Jul 10 00:46:52.580070 systemd[1]: sshd@4-10.0.0.142:22-10.0.0.1:55792.service: Deactivated successfully. Jul 10 00:46:52.580569 systemd[1]: session-5.scope: Deactivated successfully. Jul 10 00:46:52.581082 systemd-logind[1190]: Session 5 logged out. Waiting for processes to exit. Jul 10 00:46:52.581823 systemd-logind[1190]: Removed session 5. Jul 10 00:46:52.615342 sshd[1302]: Accepted publickey for core from 10.0.0.1 port 55806 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:46:52.616365 sshd[1302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:52.619219 systemd-logind[1190]: New session 6 of user core. Jul 10 00:46:52.619935 systemd[1]: Started session-6.scope. Jul 10 00:46:52.670336 sudo[1308]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 10 00:46:52.670511 sudo[1308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:46:52.672581 sudo[1308]: pam_unix(sudo:session): session closed for user root Jul 10 00:46:52.676825 sudo[1307]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 10 00:46:52.677014 sudo[1307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:46:52.684755 systemd[1]: Stopping audit-rules.service... Jul 10 00:46:52.684000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:46:52.685675 auditctl[1311]: No rules Jul 10 00:46:52.685894 systemd[1]: audit-rules.service: Deactivated successfully. Jul 10 00:46:52.686021 systemd[1]: Stopped audit-rules.service. Jul 10 00:46:52.686426 kernel: kauditd_printk_skb: 270 callbacks suppressed Jul 10 00:46:52.686475 kernel: audit: type=1305 audit(1752108412.684:191): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:46:52.687190 systemd[1]: Starting audit-rules.service... Jul 10 00:46:52.684000 audit[1311]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd42923790 a2=420 a3=0 items=0 ppid=1 pid=1311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:52.692407 kernel: audit: type=1300 audit(1752108412.684:191): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd42923790 a2=420 a3=0 items=0 ppid=1 pid=1311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:52.692454 kernel: audit: type=1327 audit(1752108412.684:191): proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:46:52.684000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:46:52.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.696536 kernel: audit: type=1131 audit(1752108412.684:192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.701695 augenrules[1328]: No rules Jul 10 00:46:52.702132 systemd[1]: Finished audit-rules.service. Jul 10 00:46:52.712737 kernel: audit: type=1130 audit(1752108412.701:193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.712822 kernel: audit: type=1106 audit(1752108412.702:194): pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.712844 kernel: audit: type=1104 audit(1752108412.702:195): pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.712860 kernel: audit: type=1106 audit(1752108412.704:196): pid=1302 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:52.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.702000 audit[1307]: USER_END pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.702000 audit[1307]: CRED_DISP pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.704000 audit[1302]: USER_END pid=1302 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:52.702831 sudo[1307]: pam_unix(sudo:session): session closed for user root Jul 10 00:46:52.705982 systemd[1]: sshd@5-10.0.0.142:22-10.0.0.1:55806.service: Deactivated successfully. Jul 10 00:46:52.703979 sshd[1302]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:52.706454 systemd[1]: session-6.scope: Deactivated successfully. Jul 10 00:46:52.706879 systemd-logind[1190]: Session 6 logged out. Waiting for processes to exit. Jul 10 00:46:52.707674 systemd[1]: Started sshd@6-10.0.0.142:22-10.0.0.1:55818.service. Jul 10 00:46:52.708490 systemd-logind[1190]: Removed session 6. Jul 10 00:46:52.715921 kernel: audit: type=1104 audit(1752108412.704:197): pid=1302 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:52.704000 audit[1302]: CRED_DISP pid=1302 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:52.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.142:22-10.0.0.1:55806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.722243 kernel: audit: type=1131 audit(1752108412.705:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.142:22-10.0.0.1:55806 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.142:22-10.0.0.1:55818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.745000 audit[1334]: USER_ACCT pid=1334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:52.746742 sshd[1334]: Accepted publickey for core from 10.0.0.1 port 55818 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:46:52.746000 audit[1334]: CRED_ACQ pid=1334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:52.746000 audit[1334]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc83c5c080 a2=3 a3=0 items=0 ppid=1 pid=1334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:52.746000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:52.747525 sshd[1334]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:52.750250 systemd-logind[1190]: New session 7 of user core. Jul 10 00:46:52.750962 systemd[1]: Started session-7.scope. Jul 10 00:46:52.753000 audit[1334]: USER_START pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:52.754000 audit[1336]: CRED_ACQ pid=1336 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:52.800000 audit[1337]: USER_ACCT pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.800806 sudo[1337]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 10 00:46:52.800000 audit[1337]: CRED_REFR pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.800997 sudo[1337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:46:52.801000 audit[1337]: USER_START pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:52.819030 systemd[1]: Starting docker.service... Jul 10 00:46:52.849300 env[1349]: time="2025-07-10T00:46:52.849247780Z" level=info msg="Starting up" Jul 10 00:46:52.850761 env[1349]: time="2025-07-10T00:46:52.850733116Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:46:52.850835 env[1349]: time="2025-07-10T00:46:52.850816963Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:46:52.850920 env[1349]: time="2025-07-10T00:46:52.850899027Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:46:52.850992 env[1349]: time="2025-07-10T00:46:52.850973396Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:46:52.852538 env[1349]: time="2025-07-10T00:46:52.852504027Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:46:52.852538 env[1349]: time="2025-07-10T00:46:52.852527090Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:46:52.852615 env[1349]: time="2025-07-10T00:46:52.852544393Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:46:52.852615 env[1349]: time="2025-07-10T00:46:52.852553710Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:46:53.498990 env[1349]: time="2025-07-10T00:46:53.498936909Z" level=info msg="Loading containers: start." Jul 10 00:46:53.552000 audit[1383]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.552000 audit[1383]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe9d20bef0 a2=0 a3=7ffe9d20bedc items=0 ppid=1349 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.552000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 10 00:46:53.554000 audit[1385]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.554000 audit[1385]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffde6b81370 a2=0 a3=7ffde6b8135c items=0 ppid=1349 pid=1385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.554000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 10 00:46:53.555000 audit[1387]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1387 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.555000 audit[1387]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd66ef6780 a2=0 a3=7ffd66ef676c items=0 ppid=1349 pid=1387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.555000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:46:53.557000 audit[1389]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.557000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffb4b76080 a2=0 a3=7fffb4b7606c items=0 ppid=1349 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.557000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:46:53.559000 audit[1391]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.559000 audit[1391]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd4614a5d0 a2=0 a3=7ffd4614a5bc items=0 ppid=1349 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.559000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 10 00:46:53.575000 audit[1396]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.575000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd2e9575d0 a2=0 a3=7ffd2e9575bc items=0 ppid=1349 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.575000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 10 00:46:53.584000 audit[1398]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.584000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe87d12160 a2=0 a3=7ffe87d1214c items=0 ppid=1349 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.584000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 10 00:46:53.585000 audit[1400]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.585000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd76afcdb0 a2=0 a3=7ffd76afcd9c items=0 ppid=1349 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.585000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 10 00:46:53.587000 audit[1402]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.587000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffcba5a5870 a2=0 a3=7ffcba5a585c items=0 ppid=1349 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.587000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:46:53.595000 audit[1406]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.595000 audit[1406]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc92c076a0 a2=0 a3=7ffc92c0768c items=0 ppid=1349 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.595000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:46:53.600000 audit[1407]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.600000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc71833350 a2=0 a3=7ffc7183333c items=0 ppid=1349 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.600000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:46:53.608740 kernel: Initializing XFRM netlink socket Jul 10 00:46:53.635271 env[1349]: time="2025-07-10T00:46:53.635233995Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 10 00:46:53.649000 audit[1415]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.649000 audit[1415]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffca7031900 a2=0 a3=7ffca70318ec items=0 ppid=1349 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.649000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 10 00:46:53.659000 audit[1418]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.659000 audit[1418]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe783d3fa0 a2=0 a3=7ffe783d3f8c items=0 ppid=1349 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.659000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 10 00:46:53.662000 audit[1421]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.662000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc1e62add0 a2=0 a3=7ffc1e62adbc items=0 ppid=1349 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.662000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 10 00:46:53.664000 audit[1423]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.664000 audit[1423]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe80a4c7d0 a2=0 a3=7ffe80a4c7bc items=0 ppid=1349 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.664000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 10 00:46:53.665000 audit[1425]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.665000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffda70a17c0 a2=0 a3=7ffda70a17ac items=0 ppid=1349 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.665000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 10 00:46:53.667000 audit[1427]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.667000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd70ed03b0 a2=0 a3=7ffd70ed039c items=0 ppid=1349 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.667000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 10 00:46:53.669000 audit[1429]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.669000 audit[1429]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd278ba950 a2=0 a3=7ffd278ba93c items=0 ppid=1349 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.669000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 10 00:46:53.675000 audit[1432]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.675000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff069239e0 a2=0 a3=7fff069239cc items=0 ppid=1349 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.675000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 10 00:46:53.677000 audit[1434]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.677000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffdf3162190 a2=0 a3=7ffdf316217c items=0 ppid=1349 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.677000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:46:53.679000 audit[1436]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.679000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc18c0bdf0 a2=0 a3=7ffc18c0bddc items=0 ppid=1349 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.679000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:46:53.680000 audit[1438]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.680000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc9a55f0f0 a2=0 a3=7ffc9a55f0dc items=0 ppid=1349 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.680000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 10 00:46:53.681981 systemd-networkd[1019]: docker0: Link UP Jul 10 00:46:53.690000 audit[1442]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.690000 audit[1442]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd7e957760 a2=0 a3=7ffd7e95774c items=0 ppid=1349 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.690000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:46:53.694000 audit[1443]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:53.694000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff4d6de370 a2=0 a3=7fff4d6de35c items=0 ppid=1349 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:53.694000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:46:53.695966 env[1349]: time="2025-07-10T00:46:53.695930653Z" level=info msg="Loading containers: done." Jul 10 00:46:53.704691 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1298033392-merged.mount: Deactivated successfully. Jul 10 00:46:53.710744 env[1349]: time="2025-07-10T00:46:53.710677008Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 10 00:46:53.710870 env[1349]: time="2025-07-10T00:46:53.710844101Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 10 00:46:53.710949 env[1349]: time="2025-07-10T00:46:53.710927427Z" level=info msg="Daemon has completed initialization" Jul 10 00:46:53.727428 systemd[1]: Started docker.service. Jul 10 00:46:53.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:53.733484 env[1349]: time="2025-07-10T00:46:53.733434175Z" level=info msg="API listen on /run/docker.sock" Jul 10 00:46:54.388969 env[1202]: time="2025-07-10T00:46:54.388917280Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 10 00:46:54.961877 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1957832518.mount: Deactivated successfully. Jul 10 00:46:56.683775 env[1202]: time="2025-07-10T00:46:56.683685009Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:56.685836 env[1202]: time="2025-07-10T00:46:56.685804584Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:56.689826 env[1202]: time="2025-07-10T00:46:56.689782584Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:56.691550 env[1202]: time="2025-07-10T00:46:56.691516375Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:56.692121 env[1202]: time="2025-07-10T00:46:56.692092095Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977\"" Jul 10 00:46:56.692728 env[1202]: time="2025-07-10T00:46:56.692631577Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 10 00:46:58.602467 env[1202]: time="2025-07-10T00:46:58.602405004Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:58.604488 env[1202]: time="2025-07-10T00:46:58.604444138Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:58.606438 env[1202]: time="2025-07-10T00:46:58.606392241Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:58.608029 env[1202]: time="2025-07-10T00:46:58.607994977Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:58.608628 env[1202]: time="2025-07-10T00:46:58.608591265Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d\"" Jul 10 00:46:58.609045 env[1202]: time="2025-07-10T00:46:58.609029798Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 10 00:47:00.873537 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 10 00:47:00.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:00.873874 systemd[1]: Stopped kubelet.service. Jul 10 00:47:00.875054 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 10 00:47:00.875145 kernel: audit: type=1130 audit(1752108420.873:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:00.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:00.876834 systemd[1]: Starting kubelet.service... Jul 10 00:47:00.884739 kernel: audit: type=1131 audit(1752108420.873:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:01.710186 systemd[1]: Started kubelet.service. Jul 10 00:47:01.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:01.714789 kernel: audit: type=1130 audit(1752108421.709:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:01.762117 kubelet[1485]: E0710 00:47:01.762045 1485 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:47:01.767572 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:47:01.767731 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:47:01.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:47:01.771735 kernel: audit: type=1131 audit(1752108421.767:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:47:02.879533 env[1202]: time="2025-07-10T00:47:02.879441023Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:02.881317 env[1202]: time="2025-07-10T00:47:02.881286103Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:02.883322 env[1202]: time="2025-07-10T00:47:02.883271236Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:02.884888 env[1202]: time="2025-07-10T00:47:02.884844747Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:02.885530 env[1202]: time="2025-07-10T00:47:02.885496239Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2\"" Jul 10 00:47:02.886176 env[1202]: time="2025-07-10T00:47:02.886151367Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 10 00:47:04.141908 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2804647435.mount: Deactivated successfully. Jul 10 00:47:05.432146 env[1202]: time="2025-07-10T00:47:05.432070384Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.434074 env[1202]: time="2025-07-10T00:47:05.434029839Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.435283 env[1202]: time="2025-07-10T00:47:05.435236341Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.436625 env[1202]: time="2025-07-10T00:47:05.436597414Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.436964 env[1202]: time="2025-07-10T00:47:05.436937341Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c\"" Jul 10 00:47:05.437452 env[1202]: time="2025-07-10T00:47:05.437423092Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 10 00:47:05.972972 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1511912214.mount: Deactivated successfully. Jul 10 00:47:07.188100 env[1202]: time="2025-07-10T00:47:07.188040755Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:07.190109 env[1202]: time="2025-07-10T00:47:07.190062777Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:07.191875 env[1202]: time="2025-07-10T00:47:07.191834761Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:07.194161 env[1202]: time="2025-07-10T00:47:07.194136477Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:07.194739 env[1202]: time="2025-07-10T00:47:07.194718068Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 10 00:47:07.195133 env[1202]: time="2025-07-10T00:47:07.195116094Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 10 00:47:07.685804 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount571529660.mount: Deactivated successfully. Jul 10 00:47:07.690788 env[1202]: time="2025-07-10T00:47:07.690734055Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:07.692333 env[1202]: time="2025-07-10T00:47:07.692299060Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:07.693693 env[1202]: time="2025-07-10T00:47:07.693650995Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:07.694985 env[1202]: time="2025-07-10T00:47:07.694954460Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:07.695346 env[1202]: time="2025-07-10T00:47:07.695313403Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 10 00:47:07.695817 env[1202]: time="2025-07-10T00:47:07.695798512Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 10 00:47:08.235057 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2483171176.mount: Deactivated successfully. Jul 10 00:47:11.774588 env[1202]: time="2025-07-10T00:47:11.774519590Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:11.776486 env[1202]: time="2025-07-10T00:47:11.776425014Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:11.778508 env[1202]: time="2025-07-10T00:47:11.778458207Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:11.780191 env[1202]: time="2025-07-10T00:47:11.780151753Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:11.780824 env[1202]: time="2025-07-10T00:47:11.780798556Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Jul 10 00:47:12.018606 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 10 00:47:12.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:12.018821 systemd[1]: Stopped kubelet.service. Jul 10 00:47:12.020444 systemd[1]: Starting kubelet.service... Jul 10 00:47:12.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:12.024919 kernel: audit: type=1130 audit(1752108432.018:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:12.024983 kernel: audit: type=1131 audit(1752108432.018:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:12.110767 systemd[1]: Started kubelet.service. Jul 10 00:47:12.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:12.114726 kernel: audit: type=1130 audit(1752108432.110:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:12.157903 kubelet[1503]: E0710 00:47:12.157833 1503 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:47:12.159860 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:47:12.159998 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:47:12.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:47:12.163740 kernel: audit: type=1131 audit(1752108432.159:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:47:14.186297 systemd[1]: Stopped kubelet.service. Jul 10 00:47:14.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:14.188385 systemd[1]: Starting kubelet.service... Jul 10 00:47:14.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:14.193313 kernel: audit: type=1130 audit(1752108434.185:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:14.193363 kernel: audit: type=1131 audit(1752108434.185:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:14.215561 systemd[1]: Reloading. Jul 10 00:47:14.290685 /usr/lib/systemd/system-generators/torcx-generator[1552]: time="2025-07-10T00:47:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:47:14.290754 /usr/lib/systemd/system-generators/torcx-generator[1552]: time="2025-07-10T00:47:14Z" level=info msg="torcx already run" Jul 10 00:47:14.961396 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:47:14.961414 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:47:14.978487 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:47:15.047687 kernel: audit: type=1400 audit(1752108435.035:243): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.047922 kernel: audit: type=1400 audit(1752108435.035:244): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.047947 kernel: audit: type=1400 audit(1752108435.036:245): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.047968 kernel: audit: type=1400 audit(1752108435.036:246): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.036000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.036000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.041000 audit: BPF prog-id=43 op=LOAD Jul 10 00:47:15.041000 audit: BPF prog-id=27 op=UNLOAD Jul 10 00:47:15.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.046000 audit: BPF prog-id=44 op=LOAD Jul 10 00:47:15.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.046000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.047000 audit: BPF prog-id=45 op=LOAD Jul 10 00:47:15.047000 audit: BPF prog-id=28 op=UNLOAD Jul 10 00:47:15.047000 audit: BPF prog-id=29 op=UNLOAD Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit: BPF prog-id=46 op=LOAD Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.048000 audit: BPF prog-id=47 op=LOAD Jul 10 00:47:15.048000 audit: BPF prog-id=30 op=UNLOAD Jul 10 00:47:15.048000 audit: BPF prog-id=31 op=UNLOAD Jul 10 00:47:15.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.050000 audit: BPF prog-id=48 op=LOAD Jul 10 00:47:15.050000 audit: BPF prog-id=41 op=UNLOAD Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit: BPF prog-id=49 op=LOAD Jul 10 00:47:15.051000 audit: BPF prog-id=38 op=UNLOAD Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.051000 audit: BPF prog-id=50 op=LOAD Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit: BPF prog-id=51 op=LOAD Jul 10 00:47:15.052000 audit: BPF prog-id=39 op=UNLOAD Jul 10 00:47:15.052000 audit: BPF prog-id=40 op=UNLOAD Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.052000 audit: BPF prog-id=52 op=LOAD Jul 10 00:47:15.052000 audit: BPF prog-id=32 op=UNLOAD Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit: BPF prog-id=53 op=LOAD Jul 10 00:47:15.053000 audit: BPF prog-id=36 op=UNLOAD Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.053000 audit: BPF prog-id=54 op=LOAD Jul 10 00:47:15.053000 audit: BPF prog-id=37 op=UNLOAD Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit: BPF prog-id=55 op=LOAD Jul 10 00:47:15.054000 audit: BPF prog-id=33 op=UNLOAD Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.054000 audit: BPF prog-id=56 op=LOAD Jul 10 00:47:15.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.055000 audit: BPF prog-id=57 op=LOAD Jul 10 00:47:15.055000 audit: BPF prog-id=34 op=UNLOAD Jul 10 00:47:15.055000 audit: BPF prog-id=35 op=UNLOAD Jul 10 00:47:15.066937 systemd[1]: Started kubelet.service. Jul 10 00:47:15.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:15.068379 systemd[1]: Stopping kubelet.service... Jul 10 00:47:15.068643 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:47:15.068855 systemd[1]: Stopped kubelet.service. Jul 10 00:47:15.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:15.070379 systemd[1]: Starting kubelet.service... Jul 10 00:47:15.157540 systemd[1]: Started kubelet.service. Jul 10 00:47:15.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:15.200188 kubelet[1600]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:47:15.200188 kubelet[1600]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 10 00:47:15.200188 kubelet[1600]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:47:15.200585 kubelet[1600]: I0710 00:47:15.200231 1600 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:47:15.424905 kubelet[1600]: I0710 00:47:15.424793 1600 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 10 00:47:15.424905 kubelet[1600]: I0710 00:47:15.424827 1600 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:47:15.425059 kubelet[1600]: I0710 00:47:15.425043 1600 server.go:934] "Client rotation is on, will bootstrap in background" Jul 10 00:47:15.449950 kubelet[1600]: E0710 00:47:15.449906 1600 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.142:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:15.450866 kubelet[1600]: I0710 00:47:15.450840 1600 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:47:15.459419 kubelet[1600]: E0710 00:47:15.459378 1600 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:47:15.459419 kubelet[1600]: I0710 00:47:15.459410 1600 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:47:15.465435 kubelet[1600]: I0710 00:47:15.465408 1600 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:47:15.466116 kubelet[1600]: I0710 00:47:15.466093 1600 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 10 00:47:15.466250 kubelet[1600]: I0710 00:47:15.466206 1600 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:47:15.466448 kubelet[1600]: I0710 00:47:15.466244 1600 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:47:15.466448 kubelet[1600]: I0710 00:47:15.466448 1600 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:47:15.466678 kubelet[1600]: I0710 00:47:15.466457 1600 container_manager_linux.go:300] "Creating device plugin manager" Jul 10 00:47:15.466678 kubelet[1600]: I0710 00:47:15.466569 1600 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:47:15.475517 kubelet[1600]: I0710 00:47:15.475496 1600 kubelet.go:408] "Attempting to sync node with API server" Jul 10 00:47:15.475563 kubelet[1600]: I0710 00:47:15.475527 1600 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:47:15.475601 kubelet[1600]: I0710 00:47:15.475565 1600 kubelet.go:314] "Adding apiserver pod source" Jul 10 00:47:15.475601 kubelet[1600]: I0710 00:47:15.475581 1600 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:47:15.488358 kubelet[1600]: W0710 00:47:15.488303 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.142:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:15.488407 kubelet[1600]: E0710 00:47:15.488357 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.142:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:15.492543 kubelet[1600]: W0710 00:47:15.492498 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.142:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:15.492591 kubelet[1600]: E0710 00:47:15.492541 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.142:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:15.493443 kubelet[1600]: I0710 00:47:15.493411 1600 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:47:15.493802 kubelet[1600]: I0710 00:47:15.493784 1600 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 00:47:15.493880 kubelet[1600]: W0710 00:47:15.493838 1600 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 10 00:47:15.496045 kubelet[1600]: I0710 00:47:15.496017 1600 server.go:1274] "Started kubelet" Jul 10 00:47:15.496230 kubelet[1600]: I0710 00:47:15.496163 1600 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:47:15.496750 kubelet[1600]: I0710 00:47:15.496163 1600 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:47:15.496750 kubelet[1600]: I0710 00:47:15.496509 1600 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:47:15.497208 kubelet[1600]: I0710 00:47:15.497182 1600 server.go:449] "Adding debug handlers to kubelet server" Jul 10 00:47:15.496000 audit[1600]: AVC avc: denied { mac_admin } for pid=1600 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.496000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:15.496000 audit[1600]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b19aa0 a1=c000b21380 a2=c000b19a70 a3=25 items=0 ppid=1 pid=1600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.496000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:15.496000 audit[1600]: AVC avc: denied { mac_admin } for pid=1600 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:15.496000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:15.496000 audit[1600]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b2d160 a1=c000b21398 a2=c000b19b30 a3=25 items=0 ppid=1 pid=1600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.496000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:15.497796 kubelet[1600]: I0710 00:47:15.497465 1600 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:47:15.497796 kubelet[1600]: I0710 00:47:15.497515 1600 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 10 00:47:15.497796 kubelet[1600]: I0710 00:47:15.497586 1600 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:47:15.500000 audit[1614]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1614 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:15.500000 audit[1614]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd89f21fc0 a2=0 a3=7ffd89f21fac items=0 ppid=1600 pid=1614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.500000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:47:15.501000 audit[1615]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:15.501000 audit[1615]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0ae46d00 a2=0 a3=7ffc0ae46cec items=0 ppid=1600 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.501000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:47:15.503145 kubelet[1600]: I0710 00:47:15.503113 1600 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:47:15.504069 kubelet[1600]: E0710 00:47:15.503738 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:15.504069 kubelet[1600]: I0710 00:47:15.503823 1600 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 10 00:47:15.504069 kubelet[1600]: I0710 00:47:15.503992 1600 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 10 00:47:15.504069 kubelet[1600]: I0710 00:47:15.504033 1600 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:47:15.504456 kubelet[1600]: W0710 00:47:15.504318 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.142:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:15.504456 kubelet[1600]: E0710 00:47:15.504352 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.142:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:15.505133 kubelet[1600]: I0710 00:47:15.504621 1600 factory.go:221] Registration of the systemd container factory successfully Jul 10 00:47:15.505133 kubelet[1600]: I0710 00:47:15.504696 1600 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:47:15.505000 audit[1617]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1617 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:15.505000 audit[1617]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd6c10f010 a2=0 a3=7ffd6c10effc items=0 ppid=1600 pid=1617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.505000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:47:15.512236 kubelet[1600]: E0710 00:47:15.512186 1600 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.142:6443: connect: connection refused" interval="200ms" Jul 10 00:47:15.512899 kubelet[1600]: E0710 00:47:15.512874 1600 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:47:15.513139 kubelet[1600]: I0710 00:47:15.513118 1600 factory.go:221] Registration of the containerd container factory successfully Jul 10 00:47:15.513420 kubelet[1600]: E0710 00:47:15.512174 1600 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.142:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.142:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850bd56c9b4309d default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 00:47:15.495989405 +0000 UTC m=+0.335397622,LastTimestamp:2025-07-10 00:47:15.495989405 +0000 UTC m=+0.335397622,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 00:47:15.514000 audit[1619]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:15.514000 audit[1619]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff8b28cb30 a2=0 a3=7fff8b28cb1c items=0 ppid=1600 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.514000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:47:15.523000 audit[1626]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1626 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:15.523000 audit[1626]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc26132750 a2=0 a3=7ffc2613273c items=0 ppid=1600 pid=1626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.523000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 10 00:47:15.524323 kubelet[1600]: I0710 00:47:15.524272 1600 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 00:47:15.524000 audit[1627]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:15.524000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdcadaf620 a2=0 a3=7ffdcadaf60c items=0 ppid=1600 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.524000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:47:15.525450 kubelet[1600]: I0710 00:47:15.525427 1600 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 00:47:15.525530 kubelet[1600]: I0710 00:47:15.525517 1600 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 10 00:47:15.525807 kubelet[1600]: I0710 00:47:15.525792 1600 kubelet.go:2321] "Starting kubelet main sync loop" Jul 10 00:47:15.525965 kubelet[1600]: E0710 00:47:15.525945 1600 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:47:15.525000 audit[1630]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:15.525000 audit[1630]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc8949c440 a2=0 a3=7ffc8949c42c items=0 ppid=1600 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.525000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:47:15.526531 kubelet[1600]: W0710 00:47:15.526388 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.142:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:15.526531 kubelet[1600]: E0710 00:47:15.526421 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.142:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:15.526000 audit[1629]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:15.526000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe9d411780 a2=0 a3=7ffe9d41176c items=0 ppid=1600 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.526000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:47:15.527261 kubelet[1600]: I0710 00:47:15.527237 1600 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 10 00:47:15.527261 kubelet[1600]: I0710 00:47:15.527253 1600 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 10 00:47:15.527346 kubelet[1600]: I0710 00:47:15.527269 1600 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:47:15.526000 audit[1631]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:15.526000 audit[1631]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffee6708e00 a2=0 a3=7ffee6708dec items=0 ppid=1600 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.526000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:47:15.527000 audit[1632]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:15.527000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa4acfac0 a2=0 a3=7fffa4acfaac items=0 ppid=1600 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.527000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:47:15.527000 audit[1633]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:15.527000 audit[1633]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe512dd4b0 a2=0 a3=7ffe512dd49c items=0 ppid=1600 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.527000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:47:15.528000 audit[1634]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:15.528000 audit[1634]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcf4a81710 a2=0 a3=7ffcf4a816fc items=0 ppid=1600 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:15.528000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:47:15.604816 kubelet[1600]: E0710 00:47:15.604794 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:15.627109 kubelet[1600]: E0710 00:47:15.627059 1600 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:47:15.705432 kubelet[1600]: E0710 00:47:15.705340 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:15.712826 kubelet[1600]: E0710 00:47:15.712799 1600 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.142:6443: connect: connection refused" interval="400ms" Jul 10 00:47:15.806090 kubelet[1600]: E0710 00:47:15.806058 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:15.827195 kubelet[1600]: E0710 00:47:15.827163 1600 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:47:15.851073 kubelet[1600]: I0710 00:47:15.851048 1600 policy_none.go:49] "None policy: Start" Jul 10 00:47:15.851848 kubelet[1600]: I0710 00:47:15.851803 1600 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 10 00:47:15.851906 kubelet[1600]: I0710 00:47:15.851855 1600 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:47:15.906135 kubelet[1600]: E0710 00:47:15.906102 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:16.007091 kubelet[1600]: E0710 00:47:16.006952 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:16.107426 kubelet[1600]: E0710 00:47:16.107387 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:16.113971 kubelet[1600]: E0710 00:47:16.113921 1600 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.142:6443: connect: connection refused" interval="800ms" Jul 10 00:47:16.208254 kubelet[1600]: E0710 00:47:16.208211 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:16.227308 kubelet[1600]: E0710 00:47:16.227272 1600 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:47:16.308813 kubelet[1600]: E0710 00:47:16.308643 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:16.379172 systemd[1]: Created slice kubepods.slice. Jul 10 00:47:16.383058 systemd[1]: Created slice kubepods-burstable.slice. Jul 10 00:47:16.385211 systemd[1]: Created slice kubepods-besteffort.slice. Jul 10 00:47:16.394269 kubelet[1600]: I0710 00:47:16.394240 1600 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 00:47:16.393000 audit[1600]: AVC avc: denied { mac_admin } for pid=1600 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.393000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:16.393000 audit[1600]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a52c60 a1=c000a3fa88 a2=c000a52c30 a3=25 items=0 ppid=1 pid=1600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.393000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:16.395041 kubelet[1600]: I0710 00:47:16.394293 1600 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 00:47:16.395041 kubelet[1600]: I0710 00:47:16.394384 1600 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:47:16.395041 kubelet[1600]: I0710 00:47:16.394393 1600 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:47:16.395041 kubelet[1600]: I0710 00:47:16.394658 1600 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:47:16.395752 kubelet[1600]: E0710 00:47:16.395728 1600 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 10 00:47:16.405087 kubelet[1600]: W0710 00:47:16.405048 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.142:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:16.405146 kubelet[1600]: E0710 00:47:16.405096 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.142:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:16.495981 kubelet[1600]: I0710 00:47:16.495956 1600 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:47:16.496254 kubelet[1600]: E0710 00:47:16.496219 1600 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.142:6443/api/v1/nodes\": dial tcp 10.0.0.142:6443: connect: connection refused" node="localhost" Jul 10 00:47:16.697368 kubelet[1600]: I0710 00:47:16.697288 1600 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:47:16.697525 kubelet[1600]: E0710 00:47:16.697493 1600 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.142:6443/api/v1/nodes\": dial tcp 10.0.0.142:6443: connect: connection refused" node="localhost" Jul 10 00:47:16.915150 kubelet[1600]: E0710 00:47:16.915107 1600 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.142:6443: connect: connection refused" interval="1.6s" Jul 10 00:47:16.943727 kubelet[1600]: W0710 00:47:16.943660 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.142:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:16.943777 kubelet[1600]: E0710 00:47:16.943745 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.142:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:16.963532 kubelet[1600]: W0710 00:47:16.963470 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.142:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:16.963532 kubelet[1600]: E0710 00:47:16.963497 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.142:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:17.033863 systemd[1]: Created slice kubepods-burstable-pod162b6b971d62e485d39a56d3b6953911.slice. Jul 10 00:47:17.049137 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 10 00:47:17.052187 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 10 00:47:17.061802 kubelet[1600]: W0710 00:47:17.061746 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.142:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:17.061875 kubelet[1600]: E0710 00:47:17.061808 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.142:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:17.098670 kubelet[1600]: I0710 00:47:17.098645 1600 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:47:17.098917 kubelet[1600]: E0710 00:47:17.098898 1600 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.142:6443/api/v1/nodes\": dial tcp 10.0.0.142:6443: connect: connection refused" node="localhost" Jul 10 00:47:17.112303 kubelet[1600]: I0710 00:47:17.112259 1600 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:17.112303 kubelet[1600]: I0710 00:47:17.112291 1600 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:17.112409 kubelet[1600]: I0710 00:47:17.112326 1600 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/162b6b971d62e485d39a56d3b6953911-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"162b6b971d62e485d39a56d3b6953911\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:17.112409 kubelet[1600]: I0710 00:47:17.112350 1600 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/162b6b971d62e485d39a56d3b6953911-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"162b6b971d62e485d39a56d3b6953911\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:17.112409 kubelet[1600]: I0710 00:47:17.112372 1600 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:17.112409 kubelet[1600]: I0710 00:47:17.112394 1600 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:17.112555 kubelet[1600]: I0710 00:47:17.112414 1600 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/162b6b971d62e485d39a56d3b6953911-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"162b6b971d62e485d39a56d3b6953911\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:17.112555 kubelet[1600]: I0710 00:47:17.112433 1600 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:17.112555 kubelet[1600]: I0710 00:47:17.112454 1600 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:17.347462 kubelet[1600]: E0710 00:47:17.347334 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:17.348395 env[1202]: time="2025-07-10T00:47:17.348334803Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:162b6b971d62e485d39a56d3b6953911,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:17.351524 kubelet[1600]: E0710 00:47:17.351487 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:17.352037 env[1202]: time="2025-07-10T00:47:17.351989698Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:17.354199 kubelet[1600]: E0710 00:47:17.354162 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:17.354482 env[1202]: time="2025-07-10T00:47:17.354449781Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:17.481259 kubelet[1600]: E0710 00:47:17.481200 1600 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.142:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:17.901104 kubelet[1600]: I0710 00:47:17.901078 1600 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:47:17.901559 kubelet[1600]: E0710 00:47:17.901530 1600 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.142:6443/api/v1/nodes\": dial tcp 10.0.0.142:6443: connect: connection refused" node="localhost" Jul 10 00:47:18.096300 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount979100937.mount: Deactivated successfully. Jul 10 00:47:18.100384 env[1202]: time="2025-07-10T00:47:18.100339871Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.106219 env[1202]: time="2025-07-10T00:47:18.106178872Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.107527 env[1202]: time="2025-07-10T00:47:18.107500320Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.108772 env[1202]: time="2025-07-10T00:47:18.108744193Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.110520 env[1202]: time="2025-07-10T00:47:18.110494966Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.111884 env[1202]: time="2025-07-10T00:47:18.111854856Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.113126 env[1202]: time="2025-07-10T00:47:18.113090714Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.114507 env[1202]: time="2025-07-10T00:47:18.114474840Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.116527 env[1202]: time="2025-07-10T00:47:18.116500819Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.118391 env[1202]: time="2025-07-10T00:47:18.118351890Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.119043 env[1202]: time="2025-07-10T00:47:18.119011467Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.119932 env[1202]: time="2025-07-10T00:47:18.119906666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.148609 env[1202]: time="2025-07-10T00:47:18.146098275Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:18.148609 env[1202]: time="2025-07-10T00:47:18.146163197Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:18.148609 env[1202]: time="2025-07-10T00:47:18.146184937Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:18.148609 env[1202]: time="2025-07-10T00:47:18.146303991Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aef0264ac7698a8c063cf842ae9a735fedac073818049134cbcd93caee873624 pid=1642 runtime=io.containerd.runc.v2 Jul 10 00:47:18.158267 env[1202]: time="2025-07-10T00:47:18.158106895Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:18.158414 env[1202]: time="2025-07-10T00:47:18.158170484Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:18.158414 env[1202]: time="2025-07-10T00:47:18.158181575Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:18.158414 env[1202]: time="2025-07-10T00:47:18.158381460Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/38d48f588d69140bf67c3ebf07d61f9bfa1e47e1c096bd5c957daf72f0cd77a3 pid=1659 runtime=io.containerd.runc.v2 Jul 10 00:47:18.162179 env[1202]: time="2025-07-10T00:47:18.161784252Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:18.162263 env[1202]: time="2025-07-10T00:47:18.162162411Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:18.162263 env[1202]: time="2025-07-10T00:47:18.162171758Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:18.162352 env[1202]: time="2025-07-10T00:47:18.162309076Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d72aee6f0554a5c0a9c0fea80f121d5f2f83a9aad549f9dda9cb2c3ae0544992 pid=1672 runtime=io.containerd.runc.v2 Jul 10 00:47:18.170061 systemd[1]: Started cri-containerd-aef0264ac7698a8c063cf842ae9a735fedac073818049134cbcd93caee873624.scope. Jul 10 00:47:18.245236 systemd[1]: Started cri-containerd-38d48f588d69140bf67c3ebf07d61f9bfa1e47e1c096bd5c957daf72f0cd77a3.scope. Jul 10 00:47:18.249386 systemd[1]: Started cri-containerd-d72aee6f0554a5c0a9c0fea80f121d5f2f83a9aad549f9dda9cb2c3ae0544992.scope. Jul 10 00:47:18.267270 kernel: kauditd_printk_skb: 219 callbacks suppressed Jul 10 00:47:18.267434 kernel: audit: type=1400 audit(1752108438.257:433): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.267489 kernel: audit: type=1400 audit(1752108438.257:434): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.267536 kernel: audit: type=1400 audit(1752108438.257:435): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.278244 kernel: audit: type=1400 audit(1752108438.257:436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.278498 kernel: audit: type=1400 audit(1752108438.257:437): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.278548 kernel: audit: type=1400 audit(1752108438.257:438): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.285640 kernel: audit: type=1400 audit(1752108438.257:439): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.285790 kernel: audit: type=1400 audit(1752108438.257:440): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.289800 kernel: audit: type=1400 audit(1752108438.257:441): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.289000 audit: BPF prog-id=58 op=LOAD Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1642 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.293766 kernel: audit: type=1400 audit(1752108438.289:442): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165663032363461633736393861386330363363663834326165396137 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=1642 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165663032363461633736393861386330363363663834326165396137 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.292000 audit: BPF prog-id=59 op=LOAD Jul 10 00:47:18.292000 audit[1660]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00020b1a0 items=0 ppid=1642 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165663032363461633736393861386330363363663834326165396137 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit: BPF prog-id=60 op=LOAD Jul 10 00:47:18.293000 audit[1660]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00020b1e8 items=0 ppid=1642 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165663032363461633736393861386330363363663834326165396137 Jul 10 00:47:18.293000 audit: BPF prog-id=60 op=UNLOAD Jul 10 00:47:18.293000 audit: BPF prog-id=59 op=UNLOAD Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { perfmon } for pid=1660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit[1660]: AVC avc: denied { bpf } for pid=1660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.293000 audit: BPF prog-id=61 op=LOAD Jul 10 00:47:18.293000 audit[1660]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00020b5f8 items=0 ppid=1642 pid=1660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.293000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165663032363461633736393861386330363363663834326165396137 Jul 10 00:47:18.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit: BPF prog-id=62 op=LOAD Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1659 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338643438663538386436393134306266363763336562663037643631 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1659 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338643438663538386436393134306266363763336562663037643631 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.308000 audit: BPF prog-id=63 op=LOAD Jul 10 00:47:18.308000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002f6990 items=0 ppid=1659 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338643438663538386436393134306266363763336562663037643631 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit: BPF prog-id=64 op=LOAD Jul 10 00:47:18.309000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002f69d8 items=0 ppid=1659 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338643438663538386436393134306266363763336562663037643631 Jul 10 00:47:18.309000 audit: BPF prog-id=64 op=UNLOAD Jul 10 00:47:18.309000 audit: BPF prog-id=63 op=UNLOAD Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { perfmon } for pid=1687 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit[1687]: AVC avc: denied { bpf } for pid=1687 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.309000 audit: BPF prog-id=65 op=LOAD Jul 10 00:47:18.309000 audit[1687]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002f6de8 items=0 ppid=1659 pid=1687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338643438663538386436393134306266363763336562663037643631 Jul 10 00:47:18.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.313000 audit: BPF prog-id=66 op=LOAD Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1672 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.314000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437326165653666303535346135633061396330666561383066313231 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1672 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.314000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437326165653666303535346135633061396330666561383066313231 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit: BPF prog-id=67 op=LOAD Jul 10 00:47:18.314000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002c2840 items=0 ppid=1672 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.314000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437326165653666303535346135633061396330666561383066313231 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit: BPF prog-id=68 op=LOAD Jul 10 00:47:18.314000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002c2888 items=0 ppid=1672 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.314000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437326165653666303535346135633061396330666561383066313231 Jul 10 00:47:18.314000 audit: BPF prog-id=68 op=UNLOAD Jul 10 00:47:18.314000 audit: BPF prog-id=67 op=UNLOAD Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.314000 audit: BPF prog-id=69 op=LOAD Jul 10 00:47:18.314000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002c2c98 items=0 ppid=1672 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.314000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437326165653666303535346135633061396330666561383066313231 Jul 10 00:47:18.335103 env[1202]: time="2025-07-10T00:47:18.335058122Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"aef0264ac7698a8c063cf842ae9a735fedac073818049134cbcd93caee873624\"" Jul 10 00:47:18.337369 kubelet[1600]: E0710 00:47:18.337001 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:18.342424 env[1202]: time="2025-07-10T00:47:18.342014638Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"38d48f588d69140bf67c3ebf07d61f9bfa1e47e1c096bd5c957daf72f0cd77a3\"" Jul 10 00:47:18.342550 env[1202]: time="2025-07-10T00:47:18.342506981Z" level=info msg="CreateContainer within sandbox \"aef0264ac7698a8c063cf842ae9a735fedac073818049134cbcd93caee873624\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 10 00:47:18.342768 kubelet[1600]: E0710 00:47:18.342739 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:18.344221 env[1202]: time="2025-07-10T00:47:18.344189106Z" level=info msg="CreateContainer within sandbox \"38d48f588d69140bf67c3ebf07d61f9bfa1e47e1c096bd5c957daf72f0cd77a3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 10 00:47:18.351107 env[1202]: time="2025-07-10T00:47:18.351065371Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:162b6b971d62e485d39a56d3b6953911,Namespace:kube-system,Attempt:0,} returns sandbox id \"d72aee6f0554a5c0a9c0fea80f121d5f2f83a9aad549f9dda9cb2c3ae0544992\"" Jul 10 00:47:18.351665 kubelet[1600]: E0710 00:47:18.351637 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:18.353034 env[1202]: time="2025-07-10T00:47:18.353002945Z" level=info msg="CreateContainer within sandbox \"d72aee6f0554a5c0a9c0fea80f121d5f2f83a9aad549f9dda9cb2c3ae0544992\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 10 00:47:18.516359 kubelet[1600]: E0710 00:47:18.516248 1600 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.142:6443: connect: connection refused" interval="3.2s" Jul 10 00:47:18.830797 kubelet[1600]: W0710 00:47:18.830699 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.142:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:18.830797 kubelet[1600]: E0710 00:47:18.830769 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.142:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:18.950687 env[1202]: time="2025-07-10T00:47:18.950629979Z" level=info msg="CreateContainer within sandbox \"38d48f588d69140bf67c3ebf07d61f9bfa1e47e1c096bd5c957daf72f0cd77a3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"038a55d84f401e19d174763e862934b715242949fa09c320c83a482bd8b52411\"" Jul 10 00:47:18.951159 env[1202]: time="2025-07-10T00:47:18.951134525Z" level=info msg="StartContainer for \"038a55d84f401e19d174763e862934b715242949fa09c320c83a482bd8b52411\"" Jul 10 00:47:18.953377 env[1202]: time="2025-07-10T00:47:18.953335753Z" level=info msg="CreateContainer within sandbox \"aef0264ac7698a8c063cf842ae9a735fedac073818049134cbcd93caee873624\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"041f852828923e3edcc5ec30dcf997c409d34e664772d1495bf1a65cab43b976\"" Jul 10 00:47:18.953733 env[1202]: time="2025-07-10T00:47:18.953693354Z" level=info msg="StartContainer for \"041f852828923e3edcc5ec30dcf997c409d34e664772d1495bf1a65cab43b976\"" Jul 10 00:47:18.953993 kubelet[1600]: W0710 00:47:18.953947 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.142:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:18.953993 kubelet[1600]: E0710 00:47:18.953995 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.142:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:18.955148 env[1202]: time="2025-07-10T00:47:18.955111273Z" level=info msg="CreateContainer within sandbox \"d72aee6f0554a5c0a9c0fea80f121d5f2f83a9aad549f9dda9cb2c3ae0544992\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"25649454b04d4e339c22f66c6f3f2444672e7c828ef6da202c85484ab3983649\"" Jul 10 00:47:18.955400 env[1202]: time="2025-07-10T00:47:18.955377522Z" level=info msg="StartContainer for \"25649454b04d4e339c22f66c6f3f2444672e7c828ef6da202c85484ab3983649\"" Jul 10 00:47:18.967125 systemd[1]: Started cri-containerd-038a55d84f401e19d174763e862934b715242949fa09c320c83a482bd8b52411.scope. Jul 10 00:47:18.969005 systemd[1]: Started cri-containerd-041f852828923e3edcc5ec30dcf997c409d34e664772d1495bf1a65cab43b976.scope. Jul 10 00:47:18.973231 systemd[1]: Started cri-containerd-25649454b04d4e339c22f66c6f3f2444672e7c828ef6da202c85484ab3983649.scope. Jul 10 00:47:18.978410 kubelet[1600]: W0710 00:47:18.978343 1600 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.142:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.142:6443: connect: connection refused Jul 10 00:47:18.978410 kubelet[1600]: E0710 00:47:18.978385 1600 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.142:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.142:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:47:18.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit: BPF prog-id=70 op=LOAD Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1659 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033386135356438346634303165313964313734373633653836323933 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=1659 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033386135356438346634303165313964313734373633653836323933 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit: BPF prog-id=71 op=LOAD Jul 10 00:47:18.981000 audit[1778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001ec9b0 items=0 ppid=1659 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033386135356438346634303165313964313734373633653836323933 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit: BPF prog-id=72 op=LOAD Jul 10 00:47:18.981000 audit[1778]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001ec9f8 items=0 ppid=1659 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033386135356438346634303165313964313734373633653836323933 Jul 10 00:47:18.981000 audit: BPF prog-id=72 op=UNLOAD Jul 10 00:47:18.981000 audit: BPF prog-id=71 op=UNLOAD Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { perfmon } for pid=1778 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit[1778]: AVC avc: denied { bpf } for pid=1778 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.981000 audit: BPF prog-id=73 op=LOAD Jul 10 00:47:18.981000 audit[1778]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001ece08 items=0 ppid=1659 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033386135356438346634303165313964313734373633653836323933 Jul 10 00:47:18.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit: BPF prog-id=74 op=LOAD Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1642 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034316638353238323839323365336564636335656333306463663939 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=1642 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034316638353238323839323365336564636335656333306463663939 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.985000 audit: BPF prog-id=75 op=LOAD Jul 10 00:47:18.985000 audit[1789]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000025260 items=0 ppid=1642 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034316638353238323839323365336564636335656333306463663939 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit: BPF prog-id=76 op=LOAD Jul 10 00:47:18.986000 audit[1789]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0000252a8 items=0 ppid=1642 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034316638353238323839323365336564636335656333306463663939 Jul 10 00:47:18.986000 audit: BPF prog-id=76 op=UNLOAD Jul 10 00:47:18.986000 audit: BPF prog-id=75 op=UNLOAD Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.986000 audit: BPF prog-id=77 op=LOAD Jul 10 00:47:18.986000 audit[1789]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0000256b8 items=0 ppid=1642 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034316638353238323839323365336564636335656333306463663939 Jul 10 00:47:18.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit: BPF prog-id=78 op=LOAD Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014fc48 a2=10 a3=1c items=0 ppid=1672 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363439343534623034643465333339633232663636633666336632 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014f6b0 a2=3c a3=8 items=0 ppid=1672 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363439343534623034643465333339633232663636633666336632 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.994000 audit: BPF prog-id=79 op=LOAD Jul 10 00:47:18.994000 audit[1797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014f9d8 a2=78 a3=c000024d40 items=0 ppid=1672 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363439343534623034643465333339633232663636633666336632 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit: BPF prog-id=80 op=LOAD Jul 10 00:47:18.995000 audit[1797]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014f770 a2=78 a3=c000024d88 items=0 ppid=1672 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363439343534623034643465333339633232663636633666336632 Jul 10 00:47:18.995000 audit: BPF prog-id=80 op=UNLOAD Jul 10 00:47:18.995000 audit: BPF prog-id=79 op=UNLOAD Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { perfmon } for pid=1797 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit[1797]: AVC avc: denied { bpf } for pid=1797 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.995000 audit: BPF prog-id=81 op=LOAD Jul 10 00:47:18.995000 audit[1797]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014fc30 a2=78 a3=c000025198 items=0 ppid=1672 pid=1797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235363439343534623034643465333339633232663636633666336632 Jul 10 00:47:19.017748 env[1202]: time="2025-07-10T00:47:19.017695671Z" level=info msg="StartContainer for \"038a55d84f401e19d174763e862934b715242949fa09c320c83a482bd8b52411\" returns successfully" Jul 10 00:47:19.020965 env[1202]: time="2025-07-10T00:47:19.020925979Z" level=info msg="StartContainer for \"041f852828923e3edcc5ec30dcf997c409d34e664772d1495bf1a65cab43b976\" returns successfully" Jul 10 00:47:19.030302 env[1202]: time="2025-07-10T00:47:19.030250636Z" level=info msg="StartContainer for \"25649454b04d4e339c22f66c6f3f2444672e7c828ef6da202c85484ab3983649\" returns successfully" Jul 10 00:47:19.748979 kubelet[1600]: I0710 00:47:19.748950 1600 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:47:19.750527 kubelet[1600]: E0710 00:47:19.750510 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:19.757906 kubelet[1600]: E0710 00:47:19.757877 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:19.758999 kubelet[1600]: E0710 00:47:19.758977 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:20.229000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:20.229000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:20.229000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00054c940 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:47:20.229000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:20.229000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000cde000 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:47:20.229000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:20.701000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:20.701000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:20.701000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c00300e060 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:47:20.701000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0066f2000 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:47:20.701000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:20.701000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:20.701000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:20.701000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c006350180 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:47:20.701000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:20.701000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:20.701000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0062a4780 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:47:20.701000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:20.709000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:20.709000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c005dc4600 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:47:20.709000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:20.710000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:20.710000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c0064602a0 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:47:20.710000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:20.760898 kubelet[1600]: E0710 00:47:20.760857 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:20.761240 kubelet[1600]: E0710 00:47:20.761164 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:20.761463 kubelet[1600]: E0710 00:47:20.761447 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:20.817739 kubelet[1600]: I0710 00:47:20.817694 1600 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 10 00:47:20.817916 kubelet[1600]: E0710 00:47:20.817897 1600 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 10 00:47:20.826485 kubelet[1600]: E0710 00:47:20.826436 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:20.926897 kubelet[1600]: E0710 00:47:20.926847 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:21.027067 kubelet[1600]: E0710 00:47:21.026968 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:21.127693 kubelet[1600]: E0710 00:47:21.127655 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:21.228181 kubelet[1600]: E0710 00:47:21.228141 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:21.328783 kubelet[1600]: E0710 00:47:21.328667 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:21.429070 kubelet[1600]: E0710 00:47:21.429041 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:21.529457 kubelet[1600]: E0710 00:47:21.529423 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:21.630152 kubelet[1600]: E0710 00:47:21.630062 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:21.730188 kubelet[1600]: E0710 00:47:21.730146 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:21.766288 kubelet[1600]: E0710 00:47:21.766251 1600 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:21.830397 kubelet[1600]: E0710 00:47:21.830353 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:21.931004 kubelet[1600]: E0710 00:47:21.930869 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:22.031078 kubelet[1600]: E0710 00:47:22.031009 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:22.131686 kubelet[1600]: E0710 00:47:22.131630 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:22.232413 kubelet[1600]: E0710 00:47:22.232268 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:22.333287 kubelet[1600]: E0710 00:47:22.333246 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:22.434145 kubelet[1600]: E0710 00:47:22.434096 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:22.534501 kubelet[1600]: E0710 00:47:22.534392 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:22.634975 kubelet[1600]: E0710 00:47:22.634945 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:22.735615 kubelet[1600]: E0710 00:47:22.735574 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:22.836325 kubelet[1600]: E0710 00:47:22.836229 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:22.936685 kubelet[1600]: E0710 00:47:22.936642 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:23.037664 kubelet[1600]: E0710 00:47:23.037613 1600 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:23.097254 systemd[1]: Reloading. Jul 10 00:47:23.169841 /usr/lib/systemd/system-generators/torcx-generator[1899]: time="2025-07-10T00:47:23Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:47:23.169870 /usr/lib/systemd/system-generators/torcx-generator[1899]: time="2025-07-10T00:47:23Z" level=info msg="torcx already run" Jul 10 00:47:23.235463 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:47:23.235481 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:47:23.252981 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:47:23.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.321572 kernel: kauditd_printk_skb: 356 callbacks suppressed Jul 10 00:47:23.321694 kernel: audit: type=1400 audit(1752108443.319:549): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.327557 kernel: audit: type=1400 audit(1752108443.319:550): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.327621 kernel: audit: type=1400 audit(1752108443.319:551): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.333681 kernel: audit: type=1400 audit(1752108443.319:552): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.333743 kernel: audit: type=1400 audit(1752108443.319:553): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.336731 kernel: audit: type=1400 audit(1752108443.319:554): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.339792 kernel: audit: type=1400 audit(1752108443.319:555): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.345864 kernel: audit: type=1400 audit(1752108443.319:556): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.345915 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 00:47:23.345936 kernel: audit: type=1400 audit(1752108443.319:557): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.323000 audit: BPF prog-id=82 op=LOAD Jul 10 00:47:23.323000 audit: BPF prog-id=62 op=UNLOAD Jul 10 00:47:23.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.326000 audit: BPF prog-id=83 op=LOAD Jul 10 00:47:23.326000 audit: BPF prog-id=43 op=UNLOAD Jul 10 00:47:23.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.326000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.329000 audit: BPF prog-id=84 op=LOAD Jul 10 00:47:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.332000 audit: BPF prog-id=85 op=LOAD Jul 10 00:47:23.333000 audit: BPF prog-id=44 op=UNLOAD Jul 10 00:47:23.333000 audit: BPF prog-id=45 op=UNLOAD Jul 10 00:47:23.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.339000 audit: BPF prog-id=86 op=LOAD Jul 10 00:47:23.339000 audit: BPF prog-id=74 op=UNLOAD Jul 10 00:47:23.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.342000 audit: BPF prog-id=87 op=LOAD Jul 10 00:47:23.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.349000 audit: BPF prog-id=88 op=LOAD Jul 10 00:47:23.349000 audit: BPF prog-id=46 op=UNLOAD Jul 10 00:47:23.349000 audit: BPF prog-id=47 op=UNLOAD Jul 10 00:47:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.349000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.350000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.350000 audit: BPF prog-id=89 op=LOAD Jul 10 00:47:23.350000 audit: BPF prog-id=70 op=UNLOAD Jul 10 00:47:23.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.351000 audit: BPF prog-id=90 op=LOAD Jul 10 00:47:23.351000 audit: BPF prog-id=48 op=UNLOAD Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit: BPF prog-id=91 op=LOAD Jul 10 00:47:23.353000 audit: BPF prog-id=49 op=UNLOAD Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit: BPF prog-id=92 op=LOAD Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.353000 audit: BPF prog-id=93 op=LOAD Jul 10 00:47:23.353000 audit: BPF prog-id=50 op=UNLOAD Jul 10 00:47:23.353000 audit: BPF prog-id=51 op=UNLOAD Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit: BPF prog-id=94 op=LOAD Jul 10 00:47:23.354000 audit: BPF prog-id=78 op=UNLOAD Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.354000 audit: BPF prog-id=95 op=LOAD Jul 10 00:47:23.354000 audit: BPF prog-id=52 op=UNLOAD Jul 10 00:47:23.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.355000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.355000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.355000 audit: BPF prog-id=96 op=LOAD Jul 10 00:47:23.355000 audit: BPF prog-id=53 op=UNLOAD Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.356000 audit: BPF prog-id=97 op=LOAD Jul 10 00:47:23.356000 audit: BPF prog-id=54 op=UNLOAD Jul 10 00:47:23.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit: BPF prog-id=98 op=LOAD Jul 10 00:47:23.357000 audit: BPF prog-id=55 op=UNLOAD Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit: BPF prog-id=99 op=LOAD Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit: BPF prog-id=100 op=LOAD Jul 10 00:47:23.357000 audit: BPF prog-id=56 op=UNLOAD Jul 10 00:47:23.357000 audit: BPF prog-id=57 op=UNLOAD Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit: BPF prog-id=101 op=LOAD Jul 10 00:47:23.358000 audit: BPF prog-id=58 op=UNLOAD Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.358000 audit: BPF prog-id=102 op=LOAD Jul 10 00:47:23.358000 audit: BPF prog-id=66 op=UNLOAD Jul 10 00:47:23.369652 systemd[1]: Stopping kubelet.service... Jul 10 00:47:23.393092 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:47:23.393301 systemd[1]: Stopped kubelet.service. Jul 10 00:47:23.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:23.395135 systemd[1]: Starting kubelet.service... Jul 10 00:47:23.484337 systemd[1]: Started kubelet.service. Jul 10 00:47:23.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:23.526505 kubelet[1944]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:47:23.526505 kubelet[1944]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 10 00:47:23.526505 kubelet[1944]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:47:23.526860 kubelet[1944]: I0710 00:47:23.526554 1944 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:47:23.534205 kubelet[1944]: I0710 00:47:23.534163 1944 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 10 00:47:23.534205 kubelet[1944]: I0710 00:47:23.534196 1944 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:47:23.534487 kubelet[1944]: I0710 00:47:23.534462 1944 server.go:934] "Client rotation is on, will bootstrap in background" Jul 10 00:47:23.535648 kubelet[1944]: I0710 00:47:23.535624 1944 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 10 00:47:23.537414 kubelet[1944]: I0710 00:47:23.537390 1944 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:47:23.539998 kubelet[1944]: E0710 00:47:23.539952 1944 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:47:23.540032 kubelet[1944]: I0710 00:47:23.539996 1944 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:47:23.544756 kubelet[1944]: I0710 00:47:23.544736 1944 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:47:23.544906 kubelet[1944]: I0710 00:47:23.544882 1944 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 10 00:47:23.545024 kubelet[1944]: I0710 00:47:23.544997 1944 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:47:23.545198 kubelet[1944]: I0710 00:47:23.545023 1944 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:47:23.545287 kubelet[1944]: I0710 00:47:23.545199 1944 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:47:23.545287 kubelet[1944]: I0710 00:47:23.545209 1944 container_manager_linux.go:300] "Creating device plugin manager" Jul 10 00:47:23.545287 kubelet[1944]: I0710 00:47:23.545234 1944 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:47:23.545351 kubelet[1944]: I0710 00:47:23.545333 1944 kubelet.go:408] "Attempting to sync node with API server" Jul 10 00:47:23.545374 kubelet[1944]: I0710 00:47:23.545353 1944 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:47:23.545400 kubelet[1944]: I0710 00:47:23.545385 1944 kubelet.go:314] "Adding apiserver pod source" Jul 10 00:47:23.545400 kubelet[1944]: I0710 00:47:23.545397 1944 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:47:23.549623 kubelet[1944]: I0710 00:47:23.549597 1944 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:47:23.550098 kubelet[1944]: I0710 00:47:23.550074 1944 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 00:47:23.550848 kubelet[1944]: I0710 00:47:23.550825 1944 server.go:1274] "Started kubelet" Jul 10 00:47:23.552000 audit[1944]: AVC avc: denied { mac_admin } for pid=1944 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.552000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:23.552000 audit[1944]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e1a120 a1=c000497f38 a2=c000e1a0f0 a3=25 items=0 ppid=1 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:23.552000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:23.552000 audit[1944]: AVC avc: denied { mac_admin } for pid=1944 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.552000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:23.552000 audit[1944]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bfc420 a1=c000497f50 a2=c000e1a1b0 a3=25 items=0 ppid=1 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:23.552000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:23.553584 kubelet[1944]: I0710 00:47:23.553217 1944 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:47:23.553584 kubelet[1944]: I0710 00:47:23.553253 1944 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 10 00:47:23.553584 kubelet[1944]: I0710 00:47:23.553288 1944 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:47:23.554066 kubelet[1944]: I0710 00:47:23.554032 1944 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:47:23.554146 kubelet[1944]: I0710 00:47:23.554118 1944 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 10 00:47:23.554244 kubelet[1944]: E0710 00:47:23.554216 1944 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:23.554294 kubelet[1944]: I0710 00:47:23.554254 1944 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 10 00:47:23.554423 kubelet[1944]: I0710 00:47:23.554402 1944 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:47:23.556126 kubelet[1944]: I0710 00:47:23.556106 1944 factory.go:221] Registration of the systemd container factory successfully Jul 10 00:47:23.562071 kubelet[1944]: I0710 00:47:23.559833 1944 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:47:23.562071 kubelet[1944]: I0710 00:47:23.560702 1944 server.go:449] "Adding debug handlers to kubelet server" Jul 10 00:47:23.562071 kubelet[1944]: E0710 00:47:23.560764 1944 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:47:23.562071 kubelet[1944]: I0710 00:47:23.561106 1944 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:47:23.562071 kubelet[1944]: I0710 00:47:23.561413 1944 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:47:23.562071 kubelet[1944]: I0710 00:47:23.561548 1944 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:47:23.562618 kubelet[1944]: I0710 00:47:23.562602 1944 factory.go:221] Registration of the containerd container factory successfully Jul 10 00:47:23.573476 kubelet[1944]: I0710 00:47:23.573434 1944 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 00:47:23.574569 kubelet[1944]: I0710 00:47:23.574538 1944 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 00:47:23.574569 kubelet[1944]: I0710 00:47:23.574564 1944 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 10 00:47:23.574638 kubelet[1944]: I0710 00:47:23.574586 1944 kubelet.go:2321] "Starting kubelet main sync loop" Jul 10 00:47:23.574638 kubelet[1944]: E0710 00:47:23.574627 1944 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:47:23.600439 kubelet[1944]: I0710 00:47:23.600356 1944 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 10 00:47:23.600439 kubelet[1944]: I0710 00:47:23.600374 1944 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 10 00:47:23.600439 kubelet[1944]: I0710 00:47:23.600390 1944 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:47:23.600585 kubelet[1944]: I0710 00:47:23.600518 1944 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 10 00:47:23.600585 kubelet[1944]: I0710 00:47:23.600527 1944 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 10 00:47:23.600585 kubelet[1944]: I0710 00:47:23.600547 1944 policy_none.go:49] "None policy: Start" Jul 10 00:47:23.601165 kubelet[1944]: I0710 00:47:23.601124 1944 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 10 00:47:23.601215 kubelet[1944]: I0710 00:47:23.601178 1944 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:47:23.601369 kubelet[1944]: I0710 00:47:23.601345 1944 state_mem.go:75] "Updated machine memory state" Jul 10 00:47:23.605436 kubelet[1944]: I0710 00:47:23.605403 1944 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 00:47:23.604000 audit[1944]: AVC avc: denied { mac_admin } for pid=1944 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:23.604000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:23.604000 audit[1944]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b52180 a1=c000ebce40 a2=c000b52150 a3=25 items=0 ppid=1 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:23.604000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:23.606085 kubelet[1944]: I0710 00:47:23.605464 1944 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 00:47:23.606085 kubelet[1944]: I0710 00:47:23.605575 1944 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:47:23.606085 kubelet[1944]: I0710 00:47:23.605586 1944 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:47:23.606085 kubelet[1944]: I0710 00:47:23.605778 1944 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:47:23.709164 kubelet[1944]: I0710 00:47:23.709129 1944 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:47:23.713990 kubelet[1944]: I0710 00:47:23.713966 1944 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 10 00:47:23.714046 kubelet[1944]: I0710 00:47:23.714023 1944 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 10 00:47:23.756068 kubelet[1944]: I0710 00:47:23.756038 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/162b6b971d62e485d39a56d3b6953911-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"162b6b971d62e485d39a56d3b6953911\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:23.756151 kubelet[1944]: I0710 00:47:23.756072 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/162b6b971d62e485d39a56d3b6953911-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"162b6b971d62e485d39a56d3b6953911\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:23.756151 kubelet[1944]: I0710 00:47:23.756092 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:23.756151 kubelet[1944]: I0710 00:47:23.756107 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:23.756151 kubelet[1944]: I0710 00:47:23.756122 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/162b6b971d62e485d39a56d3b6953911-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"162b6b971d62e485d39a56d3b6953911\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:23.756151 kubelet[1944]: I0710 00:47:23.756135 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:23.756281 kubelet[1944]: I0710 00:47:23.756147 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:23.756281 kubelet[1944]: I0710 00:47:23.756162 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:23.756281 kubelet[1944]: I0710 00:47:23.756176 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:23.983052 kubelet[1944]: E0710 00:47:23.982519 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:23.983594 kubelet[1944]: E0710 00:47:23.983561 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:23.983594 kubelet[1944]: E0710 00:47:23.983570 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:24.548822 kubelet[1944]: I0710 00:47:24.548793 1944 apiserver.go:52] "Watching apiserver" Jul 10 00:47:24.555324 kubelet[1944]: I0710 00:47:24.555305 1944 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 10 00:47:24.587823 kubelet[1944]: E0710 00:47:24.587796 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:24.588269 kubelet[1944]: E0710 00:47:24.588221 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:24.588318 kubelet[1944]: E0710 00:47:24.588246 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:24.608830 kubelet[1944]: I0710 00:47:24.608754 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.608689722 podStartE2EDuration="1.608689722s" podCreationTimestamp="2025-07-10 00:47:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:47:24.608344631 +0000 UTC m=+1.115487186" watchObservedRunningTime="2025-07-10 00:47:24.608689722 +0000 UTC m=+1.115832278" Jul 10 00:47:24.615227 kubelet[1944]: I0710 00:47:24.615185 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.615167421 podStartE2EDuration="1.615167421s" podCreationTimestamp="2025-07-10 00:47:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:47:24.614869962 +0000 UTC m=+1.122012517" watchObservedRunningTime="2025-07-10 00:47:24.615167421 +0000 UTC m=+1.122309976" Jul 10 00:47:25.589275 kubelet[1944]: E0710 00:47:25.589215 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:26.194950 kubelet[1944]: E0710 00:47:26.194914 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:26.690000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7342 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 00:47:26.690000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000675fc0 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:47:26.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:26.935186 kubelet[1944]: E0710 00:47:26.935162 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:27.691000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:27.691000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017e81a0 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:47:27.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:27.691000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:27.691000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017e81c0 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:47:27.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:27.692000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:27.692000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001856340 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:47:27.692000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:27.692000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:27.692000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001706220 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:47:27.692000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:29.228967 kubelet[1944]: I0710 00:47:29.228917 1944 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 10 00:47:29.229370 env[1202]: time="2025-07-10T00:47:29.229324732Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 10 00:47:29.229558 kubelet[1944]: I0710 00:47:29.229499 1944 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 10 00:47:30.152354 kubelet[1944]: I0710 00:47:30.152286 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=7.152271286 podStartE2EDuration="7.152271286s" podCreationTimestamp="2025-07-10 00:47:23 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:47:24.620157603 +0000 UTC m=+1.127300158" watchObservedRunningTime="2025-07-10 00:47:30.152271286 +0000 UTC m=+6.659413841" Jul 10 00:47:30.157824 systemd[1]: Created slice kubepods-besteffort-pod8da299bf_0339_45b0_9d66_36d34aafae80.slice. Jul 10 00:47:30.199600 kubelet[1944]: I0710 00:47:30.199570 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/8da299bf-0339-45b0-9d66-36d34aafae80-xtables-lock\") pod \"kube-proxy-59t27\" (UID: \"8da299bf-0339-45b0-9d66-36d34aafae80\") " pod="kube-system/kube-proxy-59t27" Jul 10 00:47:30.199600 kubelet[1944]: I0710 00:47:30.199603 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/8da299bf-0339-45b0-9d66-36d34aafae80-lib-modules\") pod \"kube-proxy-59t27\" (UID: \"8da299bf-0339-45b0-9d66-36d34aafae80\") " pod="kube-system/kube-proxy-59t27" Jul 10 00:47:30.199858 kubelet[1944]: I0710 00:47:30.199620 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/8da299bf-0339-45b0-9d66-36d34aafae80-kube-proxy\") pod \"kube-proxy-59t27\" (UID: \"8da299bf-0339-45b0-9d66-36d34aafae80\") " pod="kube-system/kube-proxy-59t27" Jul 10 00:47:30.199858 kubelet[1944]: I0710 00:47:30.199635 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qddnm\" (UniqueName: \"kubernetes.io/projected/8da299bf-0339-45b0-9d66-36d34aafae80-kube-api-access-qddnm\") pod \"kube-proxy-59t27\" (UID: \"8da299bf-0339-45b0-9d66-36d34aafae80\") " pod="kube-system/kube-proxy-59t27" Jul 10 00:47:30.268946 systemd[1]: Created slice kubepods-besteffort-pod3df2a73f_871a_4149_baf1_5d86ee3ef099.slice. Jul 10 00:47:30.300192 kubelet[1944]: I0710 00:47:30.300142 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3df2a73f-871a-4149-baf1-5d86ee3ef099-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-8zwc8\" (UID: \"3df2a73f-871a-4149-baf1-5d86ee3ef099\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-8zwc8" Jul 10 00:47:30.300192 kubelet[1944]: I0710 00:47:30.300179 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xdfkb\" (UniqueName: \"kubernetes.io/projected/3df2a73f-871a-4149-baf1-5d86ee3ef099-kube-api-access-xdfkb\") pod \"tigera-operator-5bf8dfcb4-8zwc8\" (UID: \"3df2a73f-871a-4149-baf1-5d86ee3ef099\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-8zwc8" Jul 10 00:47:30.304436 kubelet[1944]: I0710 00:47:30.304399 1944 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 10 00:47:30.463993 kubelet[1944]: E0710 00:47:30.463880 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:30.464427 env[1202]: time="2025-07-10T00:47:30.464313493Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-59t27,Uid:8da299bf-0339-45b0-9d66-36d34aafae80,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:30.580414 env[1202]: time="2025-07-10T00:47:30.580296302Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:30.580414 env[1202]: time="2025-07-10T00:47:30.580341428Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:30.580414 env[1202]: time="2025-07-10T00:47:30.580352570Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:30.580620 env[1202]: time="2025-07-10T00:47:30.580503988Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ef5da9d1effdfe86e59c34b462e2bab0f0d9579c73992342c543945e797189ec pid=1998 runtime=io.containerd.runc.v2 Jul 10 00:47:30.601365 systemd[1]: Started cri-containerd-ef5da9d1effdfe86e59c34b462e2bab0f0d9579c73992342c543945e797189ec.scope. Jul 10 00:47:30.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.622485 kernel: kauditd_printk_skb: 267 callbacks suppressed Jul 10 00:47:30.622546 kernel: audit: type=1400 audit(1752108450.619:801): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.628057 kernel: audit: type=1400 audit(1752108450.619:802): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.628125 kernel: audit: type=1400 audit(1752108450.619:803): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.633542 kernel: audit: type=1400 audit(1752108450.619:804): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.633582 kernel: audit: type=1400 audit(1752108450.619:805): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.636292 kernel: audit: type=1400 audit(1752108450.619:806): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.641795 kernel: audit: type=1400 audit(1752108450.619:807): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.641978 kernel: audit: type=1400 audit(1752108450.619:808): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.644609 kernel: audit: type=1400 audit(1752108450.619:809): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.647286 kernel: audit: type=1400 audit(1752108450.623:810): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.659775 env[1202]: time="2025-07-10T00:47:30.659730659Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-59t27,Uid:8da299bf-0339-45b0-9d66-36d34aafae80,Namespace:kube-system,Attempt:0,} returns sandbox id \"ef5da9d1effdfe86e59c34b462e2bab0f0d9579c73992342c543945e797189ec\"" Jul 10 00:47:30.660388 kubelet[1944]: E0710 00:47:30.660366 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:30.662029 env[1202]: time="2025-07-10T00:47:30.661989253Z" level=info msg="CreateContainer within sandbox \"ef5da9d1effdfe86e59c34b462e2bab0f0d9579c73992342c543945e797189ec\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 10 00:47:30.623000 audit: BPF prog-id=103 op=LOAD Jul 10 00:47:30.623000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.623000 audit[2007]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1998 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:30.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566356461396431656666646665383665353963333462343632653262 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit[2007]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1998 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:30.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566356461396431656666646665383665353963333462343632653262 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.624000 audit: BPF prog-id=104 op=LOAD Jul 10 00:47:30.624000 audit[2007]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000285390 items=0 ppid=1998 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:30.624000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566356461396431656666646665383665353963333462343632653262 Jul 10 00:47:30.626000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.626000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.626000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.626000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.626000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.626000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.626000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.626000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.626000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.626000 audit: BPF prog-id=105 op=LOAD Jul 10 00:47:30.626000 audit[2007]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002853d8 items=0 ppid=1998 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:30.626000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566356461396431656666646665383665353963333462343632653262 Jul 10 00:47:30.629000 audit: BPF prog-id=105 op=UNLOAD Jul 10 00:47:30.629000 audit: BPF prog-id=104 op=UNLOAD Jul 10 00:47:30.629000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.629000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.629000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.629000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.629000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.629000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.629000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.629000 audit[2007]: AVC avc: denied { perfmon } for pid=2007 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.629000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.629000 audit[2007]: AVC avc: denied { bpf } for pid=2007 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:30.629000 audit: BPF prog-id=106 op=LOAD Jul 10 00:47:30.629000 audit[2007]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002857e8 items=0 ppid=1998 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:30.629000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566356461396431656666646665383665353963333462343632653262 Jul 10 00:47:30.872303 env[1202]: time="2025-07-10T00:47:30.872207557Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-8zwc8,Uid:3df2a73f-871a-4149-baf1-5d86ee3ef099,Namespace:tigera-operator,Attempt:0,}" Jul 10 00:47:30.912292 kubelet[1944]: E0710 00:47:30.912230 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:31.599196 kubelet[1944]: E0710 00:47:31.599162 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:31.936569 env[1202]: time="2025-07-10T00:47:31.936438284Z" level=info msg="CreateContainer within sandbox \"ef5da9d1effdfe86e59c34b462e2bab0f0d9579c73992342c543945e797189ec\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"e3cf23de5fb9139fcee3314b9efb718786120fe8aeb6dfe91fdd728f7cf00845\"" Jul 10 00:47:31.937074 env[1202]: time="2025-07-10T00:47:31.937030039Z" level=info msg="StartContainer for \"e3cf23de5fb9139fcee3314b9efb718786120fe8aeb6dfe91fdd728f7cf00845\"" Jul 10 00:47:31.952195 systemd[1]: Started cri-containerd-e3cf23de5fb9139fcee3314b9efb718786120fe8aeb6dfe91fdd728f7cf00845.scope. Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit[2040]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7fe0886decc8 items=0 ppid=1998 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:31.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636632336465356662393133396663656533333134623965666237 Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.979000 audit: BPF prog-id=107 op=LOAD Jul 10 00:47:31.979000 audit[2040]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000304aa8 items=0 ppid=1998 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:31.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636632336465356662393133396663656533333134623965666237 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit: BPF prog-id=108 op=LOAD Jul 10 00:47:31.980000 audit[2040]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000304af8 items=0 ppid=1998 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:31.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636632336465356662393133396663656533333134623965666237 Jul 10 00:47:31.980000 audit: BPF prog-id=108 op=UNLOAD Jul 10 00:47:31.980000 audit: BPF prog-id=107 op=UNLOAD Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.980000 audit: BPF prog-id=109 op=LOAD Jul 10 00:47:31.980000 audit[2040]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000304b88 items=0 ppid=1998 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:31.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533636632336465356662393133396663656533333134623965666237 Jul 10 00:47:32.049665 env[1202]: time="2025-07-10T00:47:32.049602684Z" level=info msg="StartContainer for \"e3cf23de5fb9139fcee3314b9efb718786120fe8aeb6dfe91fdd728f7cf00845\" returns successfully" Jul 10 00:47:32.060956 env[1202]: time="2025-07-10T00:47:32.060884533Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:32.060956 env[1202]: time="2025-07-10T00:47:32.060954435Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:32.061173 env[1202]: time="2025-07-10T00:47:32.060976658Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:32.061326 env[1202]: time="2025-07-10T00:47:32.061287377Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9047857f15b4a5dd7a2562977f212a83c436e0b47ae913c7677c91f35024e3bd pid=2074 runtime=io.containerd.runc.v2 Jul 10 00:47:32.078729 systemd[1]: Started cri-containerd-9047857f15b4a5dd7a2562977f212a83c436e0b47ae913c7677c91f35024e3bd.scope. Jul 10 00:47:32.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit: BPF prog-id=110 op=LOAD Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2074 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343738353766313562346135646437613235363239373766323132 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2074 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343738353766313562346135646437613235363239373766323132 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit: BPF prog-id=111 op=LOAD Jul 10 00:47:32.099000 audit[2085]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000348170 items=0 ppid=2074 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343738353766313562346135646437613235363239373766323132 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit: BPF prog-id=112 op=LOAD Jul 10 00:47:32.099000 audit[2085]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003481b8 items=0 ppid=2074 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343738353766313562346135646437613235363239373766323132 Jul 10 00:47:32.099000 audit: BPF prog-id=112 op=UNLOAD Jul 10 00:47:32.099000 audit: BPF prog-id=111 op=UNLOAD Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { perfmon } for pid=2085 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit[2085]: AVC avc: denied { bpf } for pid=2085 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:32.099000 audit: BPF prog-id=113 op=LOAD Jul 10 00:47:32.099000 audit[2085]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003485c8 items=0 ppid=2074 pid=2085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.099000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930343738353766313562346135646437613235363239373766323132 Jul 10 00:47:32.131019 env[1202]: time="2025-07-10T00:47:32.130975939Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-8zwc8,Uid:3df2a73f-871a-4149-baf1-5d86ee3ef099,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"9047857f15b4a5dd7a2562977f212a83c436e0b47ae913c7677c91f35024e3bd\"" Jul 10 00:47:32.133261 env[1202]: time="2025-07-10T00:47:32.133214700Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 10 00:47:32.178000 audit[2141]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2141 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.178000 audit[2141]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc854f46f0 a2=0 a3=7ffc854f46dc items=0 ppid=2051 pid=2141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.178000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:47:32.179000 audit[2145]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2145 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.179000 audit[2145]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca51ab7d0 a2=0 a3=7ffca51ab7bc items=0 ppid=2051 pid=2145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.179000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:47:32.181000 audit[2146]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.181000 audit[2146]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed2633a40 a2=0 a3=7ffed2633a2c items=0 ppid=2051 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.181000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:47:32.182000 audit[2142]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2142 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.182000 audit[2142]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd7c78c6e0 a2=0 a3=7ffd7c78c6cc items=0 ppid=2051 pid=2142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.182000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:47:32.183000 audit[2147]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.183000 audit[2147]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff5df002e0 a2=0 a3=7fff5df002cc items=0 ppid=2051 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:47:32.184000 audit[2148]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2148 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.184000 audit[2148]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff8004b500 a2=0 a3=7fff8004b4ec items=0 ppid=2051 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.184000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:47:32.283000 audit[2149]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.283000 audit[2149]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff2cef36b0 a2=0 a3=7fff2cef369c items=0 ppid=2051 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.283000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:47:32.286000 audit[2151]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.286000 audit[2151]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd6f1d7950 a2=0 a3=7ffd6f1d793c items=0 ppid=2051 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.286000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 10 00:47:32.289000 audit[2154]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.289000 audit[2154]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd8c724f40 a2=0 a3=7ffd8c724f2c items=0 ppid=2051 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.289000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 10 00:47:32.290000 audit[2155]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.290000 audit[2155]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff0b76380 a2=0 a3=7ffff0b7636c items=0 ppid=2051 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.290000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:47:32.292000 audit[2157]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.292000 audit[2157]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdbb537100 a2=0 a3=7ffdbb5370ec items=0 ppid=2051 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.292000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:47:32.293000 audit[2158]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.293000 audit[2158]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa070d300 a2=0 a3=7fffa070d2ec items=0 ppid=2051 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.293000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:47:32.295000 audit[2160]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.295000 audit[2160]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffd6db8700 a2=0 a3=7fffd6db86ec items=0 ppid=2051 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.295000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:47:32.298000 audit[2163]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.298000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe2dafd1a0 a2=0 a3=7ffe2dafd18c items=0 ppid=2051 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.298000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 10 00:47:32.299000 audit[2164]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.299000 audit[2164]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe82b55520 a2=0 a3=7ffe82b5550c items=0 ppid=2051 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.299000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:47:32.301000 audit[2166]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.301000 audit[2166]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc37d4c340 a2=0 a3=7ffc37d4c32c items=0 ppid=2051 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.301000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:47:32.302000 audit[2167]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.302000 audit[2167]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdaef5afe0 a2=0 a3=7ffdaef5afcc items=0 ppid=2051 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.302000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:47:32.305000 audit[2169]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.305000 audit[2169]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff9f81a3e0 a2=0 a3=7fff9f81a3cc items=0 ppid=2051 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.305000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:47:32.308000 audit[2172]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.308000 audit[2172]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff15299db0 a2=0 a3=7fff15299d9c items=0 ppid=2051 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.308000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:47:32.312000 audit[2175]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.312000 audit[2175]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff8679c0a0 a2=0 a3=7fff8679c08c items=0 ppid=2051 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:47:32.313000 audit[2176]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.313000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff49867900 a2=0 a3=7fff498678ec items=0 ppid=2051 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.313000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:47:32.315000 audit[2178]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.315000 audit[2178]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc68ae01f0 a2=0 a3=7ffc68ae01dc items=0 ppid=2051 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.315000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:47:32.318000 audit[2181]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.318000 audit[2181]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd6d916120 a2=0 a3=7ffd6d91610c items=0 ppid=2051 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.318000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:47:32.319000 audit[2182]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.319000 audit[2182]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec9579fa0 a2=0 a3=7ffec9579f8c items=0 ppid=2051 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.319000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:47:32.321000 audit[2184]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:32.321000 audit[2184]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffeb32f89f0 a2=0 a3=7ffeb32f89dc items=0 ppid=2051 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.321000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:47:32.341000 audit[2190]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:32.341000 audit[2190]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd120ce680 a2=0 a3=7ffd120ce66c items=0 ppid=2051 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.341000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:32.350000 audit[2190]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:32.350000 audit[2190]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffd120ce680 a2=0 a3=7ffd120ce66c items=0 ppid=2051 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.350000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:32.351000 audit[2195]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.351000 audit[2195]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe3cab0b60 a2=0 a3=7ffe3cab0b4c items=0 ppid=2051 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.351000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:47:32.353000 audit[2197]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2197 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.353000 audit[2197]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffceb1d2e20 a2=0 a3=7ffceb1d2e0c items=0 ppid=2051 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.353000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 10 00:47:32.356000 audit[2200]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.356000 audit[2200]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffead0bb060 a2=0 a3=7ffead0bb04c items=0 ppid=2051 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.356000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 10 00:47:32.357000 audit[2201]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.357000 audit[2201]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd3382b060 a2=0 a3=7ffd3382b04c items=0 ppid=2051 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.357000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:47:32.359000 audit[2203]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.359000 audit[2203]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffca9fdb810 a2=0 a3=7ffca9fdb7fc items=0 ppid=2051 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.359000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:47:32.360000 audit[2204]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.360000 audit[2204]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2426a380 a2=0 a3=7ffe2426a36c items=0 ppid=2051 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.360000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:47:32.362000 audit[2206]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.362000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc94359630 a2=0 a3=7ffc9435961c items=0 ppid=2051 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.362000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 10 00:47:32.366000 audit[2209]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.366000 audit[2209]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffefb45f9c0 a2=0 a3=7ffefb45f9ac items=0 ppid=2051 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.366000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:47:32.366000 audit[2210]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.366000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd72fcfbe0 a2=0 a3=7ffd72fcfbcc items=0 ppid=2051 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.366000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:47:32.369000 audit[2212]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.369000 audit[2212]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffeb10e2bc0 a2=0 a3=7ffeb10e2bac items=0 ppid=2051 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.369000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:47:32.369000 audit[2213]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.369000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd6042c380 a2=0 a3=7ffd6042c36c items=0 ppid=2051 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.369000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:47:32.372000 audit[2215]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.372000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc2aa8b820 a2=0 a3=7ffc2aa8b80c items=0 ppid=2051 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.372000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:47:32.374000 audit[2218]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.374000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdc14e3440 a2=0 a3=7ffdc14e342c items=0 ppid=2051 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.374000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:47:32.377000 audit[2221]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.377000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc34a6ccf0 a2=0 a3=7ffc34a6ccdc items=0 ppid=2051 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.377000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 10 00:47:32.378000 audit[2222]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.378000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff34d3d0d0 a2=0 a3=7fff34d3d0bc items=0 ppid=2051 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.378000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:47:32.380000 audit[2224]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.380000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffcc12ffa70 a2=0 a3=7ffcc12ffa5c items=0 ppid=2051 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.380000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:47:32.383000 audit[2227]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.383000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff67d100c0 a2=0 a3=7fff67d100ac items=0 ppid=2051 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.383000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:47:32.384000 audit[2228]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.384000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcec8cae50 a2=0 a3=7ffcec8cae3c items=0 ppid=2051 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.384000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:47:32.386000 audit[2230]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.386000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffef2720970 a2=0 a3=7ffef272095c items=0 ppid=2051 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.386000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:47:32.387000 audit[2231]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.387000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff096e3360 a2=0 a3=7fff096e334c items=0 ppid=2051 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.387000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:47:32.389000 audit[2233]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.389000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffde31e2a50 a2=0 a3=7ffde31e2a3c items=0 ppid=2051 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.389000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:47:32.392000 audit[2236]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:32.392000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff9df7f830 a2=0 a3=7fff9df7f81c items=0 ppid=2051 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.392000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:47:32.394000 audit[2238]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:47:32.394000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffef50d65d0 a2=0 a3=7ffef50d65bc items=0 ppid=2051 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.394000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:32.395000 audit[2238]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:47:32.395000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffef50d65d0 a2=0 a3=7ffef50d65bc items=0 ppid=2051 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:32.395000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:32.602414 kubelet[1944]: E0710 00:47:32.602310 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:32.611495 kubelet[1944]: I0710 00:47:32.611439 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-59t27" podStartSLOduration=2.611420159 podStartE2EDuration="2.611420159s" podCreationTimestamp="2025-07-10 00:47:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:47:32.611246729 +0000 UTC m=+9.118389284" watchObservedRunningTime="2025-07-10 00:47:32.611420159 +0000 UTC m=+9.118562704" Jul 10 00:47:33.331022 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3135062685.mount: Deactivated successfully. Jul 10 00:47:33.471961 update_engine[1192]: I0710 00:47:33.471920 1192 update_attempter.cc:509] Updating boot flags... Jul 10 00:47:33.604778 kubelet[1944]: E0710 00:47:33.604612 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:34.075723 env[1202]: time="2025-07-10T00:47:34.075674252Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:34.077509 env[1202]: time="2025-07-10T00:47:34.077473994Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:34.078861 env[1202]: time="2025-07-10T00:47:34.078807001Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:34.080089 env[1202]: time="2025-07-10T00:47:34.080065387Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:34.080555 env[1202]: time="2025-07-10T00:47:34.080521051Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 10 00:47:34.082279 env[1202]: time="2025-07-10T00:47:34.082248685Z" level=info msg="CreateContainer within sandbox \"9047857f15b4a5dd7a2562977f212a83c436e0b47ae913c7677c91f35024e3bd\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 10 00:47:34.092403 env[1202]: time="2025-07-10T00:47:34.092367608Z" level=info msg="CreateContainer within sandbox \"9047857f15b4a5dd7a2562977f212a83c436e0b47ae913c7677c91f35024e3bd\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"3e06a2792622cf4d6da5171255b118ac244f25cda24874e8616292f886191892\"" Jul 10 00:47:34.092823 env[1202]: time="2025-07-10T00:47:34.092779760Z" level=info msg="StartContainer for \"3e06a2792622cf4d6da5171255b118ac244f25cda24874e8616292f886191892\"" Jul 10 00:47:34.111505 systemd[1]: Started cri-containerd-3e06a2792622cf4d6da5171255b118ac244f25cda24874e8616292f886191892.scope. Jul 10 00:47:34.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit: BPF prog-id=114 op=LOAD Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=2074 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:34.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303661323739323632326366346436646135313731323535623131 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001996b0 a2=3c a3=8 items=0 ppid=2074 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:34.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303661323739323632326366346436646135313731323535623131 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit: BPF prog-id=115 op=LOAD Jul 10 00:47:34.119000 audit[2260]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001999d8 a2=78 a3=c00028e860 items=0 ppid=2074 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:34.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303661323739323632326366346436646135313731323535623131 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.119000 audit: BPF prog-id=116 op=LOAD Jul 10 00:47:34.119000 audit[2260]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000199770 a2=78 a3=c00028e8a8 items=0 ppid=2074 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:34.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303661323739323632326366346436646135313731323535623131 Jul 10 00:47:34.120000 audit: BPF prog-id=116 op=UNLOAD Jul 10 00:47:34.120000 audit: BPF prog-id=115 op=UNLOAD Jul 10 00:47:34.120000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.120000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.120000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.120000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.120000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.120000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.120000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.120000 audit[2260]: AVC avc: denied { perfmon } for pid=2260 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.120000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.120000 audit[2260]: AVC avc: denied { bpf } for pid=2260 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:34.120000 audit: BPF prog-id=117 op=LOAD Jul 10 00:47:34.120000 audit[2260]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000199c30 a2=78 a3=c00028ecb8 items=0 ppid=2074 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:34.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303661323739323632326366346436646135313731323535623131 Jul 10 00:47:34.170353 env[1202]: time="2025-07-10T00:47:34.170283290Z" level=info msg="StartContainer for \"3e06a2792622cf4d6da5171255b118ac244f25cda24874e8616292f886191892\" returns successfully" Jul 10 00:47:34.614440 kubelet[1944]: I0710 00:47:34.614391 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-8zwc8" podStartSLOduration=2.665635724 podStartE2EDuration="4.614376626s" podCreationTimestamp="2025-07-10 00:47:30 +0000 UTC" firstStartedPulling="2025-07-10 00:47:32.132465147 +0000 UTC m=+8.639607702" lastFinishedPulling="2025-07-10 00:47:34.081206049 +0000 UTC m=+10.588348604" observedRunningTime="2025-07-10 00:47:34.614194581 +0000 UTC m=+11.121337136" watchObservedRunningTime="2025-07-10 00:47:34.614376626 +0000 UTC m=+11.121519181" Jul 10 00:47:36.206179 kubelet[1944]: E0710 00:47:36.206131 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:36.940397 kubelet[1944]: E0710 00:47:36.940358 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:37.612040 kubelet[1944]: E0710 00:47:37.612006 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:39.473769 sudo[1337]: pam_unix(sudo:session): session closed for user root Jul 10 00:47:39.479007 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 10 00:47:39.479185 kernel: audit: type=1106 audit(1752108459.472:912): pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:47:39.472000 audit[1337]: USER_END pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:47:39.482735 kernel: audit: type=1104 audit(1752108459.472:913): pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:47:39.472000 audit[1337]: CRED_DISP pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:47:39.484241 sshd[1334]: pam_unix(sshd:session): session closed for user core Jul 10 00:47:39.483000 audit[1334]: USER_END pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:39.486890 systemd[1]: sshd@6-10.0.0.142:22-10.0.0.1:55818.service: Deactivated successfully. Jul 10 00:47:39.487605 systemd[1]: session-7.scope: Deactivated successfully. Jul 10 00:47:39.487764 systemd[1]: session-7.scope: Consumed 4.330s CPU time. Jul 10 00:47:39.488189 systemd-logind[1190]: Session 7 logged out. Waiting for processes to exit. Jul 10 00:47:39.489144 systemd-logind[1190]: Removed session 7. Jul 10 00:47:39.483000 audit[1334]: CRED_DISP pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:39.493080 kernel: audit: type=1106 audit(1752108459.483:914): pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:39.493135 kernel: audit: type=1104 audit(1752108459.483:915): pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:39.483000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.142:22-10.0.0.1:55818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:39.496667 kernel: audit: type=1131 audit(1752108459.483:916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.142:22-10.0.0.1:55818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:39.795000 audit[2348]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:39.799899 kernel: audit: type=1325 audit(1752108459.795:917): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:39.795000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffff5035770 a2=0 a3=7ffff503575c items=0 ppid=2051 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:39.805796 kernel: audit: type=1300 audit(1752108459.795:917): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffff5035770 a2=0 a3=7ffff503575c items=0 ppid=2051 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:39.795000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:39.808743 kernel: audit: type=1327 audit(1752108459.795:917): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:39.805000 audit[2348]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:39.819128 kernel: audit: type=1325 audit(1752108459.805:918): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:39.819296 kernel: audit: type=1300 audit(1752108459.805:918): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffff5035770 a2=0 a3=0 items=0 ppid=2051 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:39.805000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffff5035770 a2=0 a3=0 items=0 ppid=2051 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:39.805000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:39.814000 audit[2350]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:39.814000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe61e882c0 a2=0 a3=7ffe61e882ac items=0 ppid=2051 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:39.814000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:39.820000 audit[2350]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:39.820000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe61e882c0 a2=0 a3=0 items=0 ppid=2051 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:39.820000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:41.671000 audit[2352]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:41.671000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffdbbd53b50 a2=0 a3=7ffdbbd53b3c items=0 ppid=2051 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:41.671000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:41.675000 audit[2352]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:41.675000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdbbd53b50 a2=0 a3=0 items=0 ppid=2051 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:41.675000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:41.930000 audit[2354]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:41.930000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffcb3230770 a2=0 a3=7ffcb323075c items=0 ppid=2051 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:41.930000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:41.935000 audit[2354]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:41.935000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcb3230770 a2=0 a3=0 items=0 ppid=2051 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:41.935000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:41.952662 systemd[1]: Created slice kubepods-besteffort-pod37a79fed_182d_41e4_9ea5_f990ec2a55bc.slice. Jul 10 00:47:41.978534 kubelet[1944]: I0710 00:47:41.978474 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/37a79fed-182d-41e4-9ea5-f990ec2a55bc-tigera-ca-bundle\") pod \"calico-typha-8597864b59-8g8nl\" (UID: \"37a79fed-182d-41e4-9ea5-f990ec2a55bc\") " pod="calico-system/calico-typha-8597864b59-8g8nl" Jul 10 00:47:41.978534 kubelet[1944]: I0710 00:47:41.978513 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wzgrz\" (UniqueName: \"kubernetes.io/projected/37a79fed-182d-41e4-9ea5-f990ec2a55bc-kube-api-access-wzgrz\") pod \"calico-typha-8597864b59-8g8nl\" (UID: \"37a79fed-182d-41e4-9ea5-f990ec2a55bc\") " pod="calico-system/calico-typha-8597864b59-8g8nl" Jul 10 00:47:41.978534 kubelet[1944]: I0710 00:47:41.978535 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/37a79fed-182d-41e4-9ea5-f990ec2a55bc-typha-certs\") pod \"calico-typha-8597864b59-8g8nl\" (UID: \"37a79fed-182d-41e4-9ea5-f990ec2a55bc\") " pod="calico-system/calico-typha-8597864b59-8g8nl" Jul 10 00:47:42.256224 kubelet[1944]: E0710 00:47:42.256186 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:42.256691 env[1202]: time="2025-07-10T00:47:42.256631297Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-8597864b59-8g8nl,Uid:37a79fed-182d-41e4-9ea5-f990ec2a55bc,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:42.445889 env[1202]: time="2025-07-10T00:47:42.445723354Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:42.445889 env[1202]: time="2025-07-10T00:47:42.445771125Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:42.445889 env[1202]: time="2025-07-10T00:47:42.445783789Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:42.446171 env[1202]: time="2025-07-10T00:47:42.445985039Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6a052404b6a532749e69eec22d7e1ae6436bf99002f56839ab503f50dcd7b992 pid=2366 runtime=io.containerd.runc.v2 Jul 10 00:47:42.466904 systemd[1]: Started cri-containerd-6a052404b6a532749e69eec22d7e1ae6436bf99002f56839ab503f50dcd7b992.scope. Jul 10 00:47:42.469114 systemd[1]: Created slice kubepods-besteffort-podccbdfce8_f039_40fe_8478_54738a8e90a8.slice. Jul 10 00:47:42.488800 kubelet[1944]: I0710 00:47:42.488752 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ccbdfce8-f039-40fe-8478-54738a8e90a8-lib-modules\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.488800 kubelet[1944]: I0710 00:47:42.488791 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/ccbdfce8-f039-40fe-8478-54738a8e90a8-policysync\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.488800 kubelet[1944]: I0710 00:47:42.488807 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/ccbdfce8-f039-40fe-8478-54738a8e90a8-var-run-calico\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.489099 kubelet[1944]: I0710 00:47:42.488821 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/ccbdfce8-f039-40fe-8478-54738a8e90a8-cni-log-dir\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.489099 kubelet[1944]: I0710 00:47:42.488834 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/ccbdfce8-f039-40fe-8478-54738a8e90a8-flexvol-driver-host\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.489099 kubelet[1944]: I0710 00:47:42.488851 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ccbdfce8-f039-40fe-8478-54738a8e90a8-xtables-lock\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.489099 kubelet[1944]: I0710 00:47:42.488864 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jrpd4\" (UniqueName: \"kubernetes.io/projected/ccbdfce8-f039-40fe-8478-54738a8e90a8-kube-api-access-jrpd4\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.489099 kubelet[1944]: I0710 00:47:42.488879 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ccbdfce8-f039-40fe-8478-54738a8e90a8-tigera-ca-bundle\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.489229 kubelet[1944]: I0710 00:47:42.488892 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/ccbdfce8-f039-40fe-8478-54738a8e90a8-cni-bin-dir\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.489229 kubelet[1944]: I0710 00:47:42.488905 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/ccbdfce8-f039-40fe-8478-54738a8e90a8-cni-net-dir\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.489229 kubelet[1944]: I0710 00:47:42.488917 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/ccbdfce8-f039-40fe-8478-54738a8e90a8-node-certs\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.489229 kubelet[1944]: I0710 00:47:42.488929 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/ccbdfce8-f039-40fe-8478-54738a8e90a8-var-lib-calico\") pod \"calico-node-6cz5r\" (UID: \"ccbdfce8-f039-40fe-8478-54738a8e90a8\") " pod="calico-system/calico-node-6cz5r" Jul 10 00:47:42.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.524000 audit: BPF prog-id=118 op=LOAD Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2366 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661303532343034623661353332373439653639656563323264376531 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=2366 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661303532343034623661353332373439653639656563323264376531 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit: BPF prog-id=119 op=LOAD Jul 10 00:47:42.525000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0003c0fa0 items=0 ppid=2366 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661303532343034623661353332373439653639656563323264376531 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit: BPF prog-id=120 op=LOAD Jul 10 00:47:42.525000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0003c0fe8 items=0 ppid=2366 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661303532343034623661353332373439653639656563323264376531 Jul 10 00:47:42.525000 audit: BPF prog-id=120 op=UNLOAD Jul 10 00:47:42.525000 audit: BPF prog-id=119 op=UNLOAD Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { perfmon } for pid=2376 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit[2376]: AVC avc: denied { bpf } for pid=2376 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.525000 audit: BPF prog-id=121 op=LOAD Jul 10 00:47:42.525000 audit[2376]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003c13f8 items=0 ppid=2366 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661303532343034623661353332373439653639656563323264376531 Jul 10 00:47:42.553949 env[1202]: time="2025-07-10T00:47:42.553894756Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-8597864b59-8g8nl,Uid:37a79fed-182d-41e4-9ea5-f990ec2a55bc,Namespace:calico-system,Attempt:0,} returns sandbox id \"6a052404b6a532749e69eec22d7e1ae6436bf99002f56839ab503f50dcd7b992\"" Jul 10 00:47:42.554799 kubelet[1944]: E0710 00:47:42.554764 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:42.555847 env[1202]: time="2025-07-10T00:47:42.555811975Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 10 00:47:42.583724 kubelet[1944]: E0710 00:47:42.583658 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qlpnz" podUID="d5ed6e84-883c-4226-9ad8-831f6e16569a" Jul 10 00:47:42.594802 kubelet[1944]: E0710 00:47:42.594290 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.594802 kubelet[1944]: W0710 00:47:42.594407 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.595295 kubelet[1944]: E0710 00:47:42.595068 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.595350 kubelet[1944]: E0710 00:47:42.595337 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.595350 kubelet[1944]: W0710 00:47:42.595345 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.595419 kubelet[1944]: E0710 00:47:42.595354 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.601289 kubelet[1944]: E0710 00:47:42.601257 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.601289 kubelet[1944]: W0710 00:47:42.601274 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.601289 kubelet[1944]: E0710 00:47:42.601284 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.673768 kubelet[1944]: E0710 00:47:42.673726 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.673768 kubelet[1944]: W0710 00:47:42.673750 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.673768 kubelet[1944]: E0710 00:47:42.673771 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.674088 kubelet[1944]: E0710 00:47:42.674061 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.674088 kubelet[1944]: W0710 00:47:42.674074 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.674088 kubelet[1944]: E0710 00:47:42.674082 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.674272 kubelet[1944]: E0710 00:47:42.674250 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.674272 kubelet[1944]: W0710 00:47:42.674261 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.674326 kubelet[1944]: E0710 00:47:42.674281 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.674468 kubelet[1944]: E0710 00:47:42.674448 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.674468 kubelet[1944]: W0710 00:47:42.674460 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.674524 kubelet[1944]: E0710 00:47:42.674468 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.674743 kubelet[1944]: E0710 00:47:42.674697 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.674799 kubelet[1944]: W0710 00:47:42.674742 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.674799 kubelet[1944]: E0710 00:47:42.674767 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.675028 kubelet[1944]: E0710 00:47:42.675005 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.675028 kubelet[1944]: W0710 00:47:42.675016 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.675028 kubelet[1944]: E0710 00:47:42.675024 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.675167 kubelet[1944]: E0710 00:47:42.675156 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.675167 kubelet[1944]: W0710 00:47:42.675165 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.675219 kubelet[1944]: E0710 00:47:42.675174 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.675334 kubelet[1944]: E0710 00:47:42.675318 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.675334 kubelet[1944]: W0710 00:47:42.675328 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.675334 kubelet[1944]: E0710 00:47:42.675335 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.675497 kubelet[1944]: E0710 00:47:42.675482 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.675497 kubelet[1944]: W0710 00:47:42.675491 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.675497 kubelet[1944]: E0710 00:47:42.675498 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.675641 kubelet[1944]: E0710 00:47:42.675628 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.675641 kubelet[1944]: W0710 00:47:42.675636 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.675717 kubelet[1944]: E0710 00:47:42.675642 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.675813 kubelet[1944]: E0710 00:47:42.675802 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.675840 kubelet[1944]: W0710 00:47:42.675818 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.675840 kubelet[1944]: E0710 00:47:42.675827 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.675984 kubelet[1944]: E0710 00:47:42.675973 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.675984 kubelet[1944]: W0710 00:47:42.675982 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.676038 kubelet[1944]: E0710 00:47:42.675990 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.676142 kubelet[1944]: E0710 00:47:42.676130 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.676142 kubelet[1944]: W0710 00:47:42.676140 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.676193 kubelet[1944]: E0710 00:47:42.676149 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.676289 kubelet[1944]: E0710 00:47:42.676277 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.676289 kubelet[1944]: W0710 00:47:42.676287 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.676337 kubelet[1944]: E0710 00:47:42.676294 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.676431 kubelet[1944]: E0710 00:47:42.676420 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.676431 kubelet[1944]: W0710 00:47:42.676429 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.676486 kubelet[1944]: E0710 00:47:42.676436 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.676592 kubelet[1944]: E0710 00:47:42.676580 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.676592 kubelet[1944]: W0710 00:47:42.676591 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.676641 kubelet[1944]: E0710 00:47:42.676599 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.676790 kubelet[1944]: E0710 00:47:42.676778 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.676790 kubelet[1944]: W0710 00:47:42.676788 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.676859 kubelet[1944]: E0710 00:47:42.676795 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.676938 kubelet[1944]: E0710 00:47:42.676928 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.676938 kubelet[1944]: W0710 00:47:42.676936 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.676990 kubelet[1944]: E0710 00:47:42.676944 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.677092 kubelet[1944]: E0710 00:47:42.677081 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.677092 kubelet[1944]: W0710 00:47:42.677090 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.677143 kubelet[1944]: E0710 00:47:42.677097 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.677251 kubelet[1944]: E0710 00:47:42.677240 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.677251 kubelet[1944]: W0710 00:47:42.677249 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.677304 kubelet[1944]: E0710 00:47:42.677256 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.690540 kubelet[1944]: E0710 00:47:42.690506 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.690540 kubelet[1944]: W0710 00:47:42.690520 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.690540 kubelet[1944]: E0710 00:47:42.690529 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.690798 kubelet[1944]: I0710 00:47:42.690553 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/d5ed6e84-883c-4226-9ad8-831f6e16569a-varrun\") pod \"csi-node-driver-qlpnz\" (UID: \"d5ed6e84-883c-4226-9ad8-831f6e16569a\") " pod="calico-system/csi-node-driver-qlpnz" Jul 10 00:47:42.690832 kubelet[1944]: E0710 00:47:42.690796 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.690832 kubelet[1944]: W0710 00:47:42.690817 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.690882 kubelet[1944]: E0710 00:47:42.690843 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.690882 kubelet[1944]: I0710 00:47:42.690872 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/d5ed6e84-883c-4226-9ad8-831f6e16569a-registration-dir\") pod \"csi-node-driver-qlpnz\" (UID: \"d5ed6e84-883c-4226-9ad8-831f6e16569a\") " pod="calico-system/csi-node-driver-qlpnz" Jul 10 00:47:42.691094 kubelet[1944]: E0710 00:47:42.691069 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.691094 kubelet[1944]: W0710 00:47:42.691081 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.691094 kubelet[1944]: E0710 00:47:42.691096 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.691194 kubelet[1944]: I0710 00:47:42.691124 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/d5ed6e84-883c-4226-9ad8-831f6e16569a-socket-dir\") pod \"csi-node-driver-qlpnz\" (UID: \"d5ed6e84-883c-4226-9ad8-831f6e16569a\") " pod="calico-system/csi-node-driver-qlpnz" Jul 10 00:47:42.691328 kubelet[1944]: E0710 00:47:42.691304 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.691328 kubelet[1944]: W0710 00:47:42.691317 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.691383 kubelet[1944]: E0710 00:47:42.691331 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.691498 kubelet[1944]: E0710 00:47:42.691482 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.691498 kubelet[1944]: W0710 00:47:42.691492 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.691570 kubelet[1944]: E0710 00:47:42.691503 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.691757 kubelet[1944]: E0710 00:47:42.691732 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.691757 kubelet[1944]: W0710 00:47:42.691753 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.691848 kubelet[1944]: E0710 00:47:42.691781 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.691993 kubelet[1944]: E0710 00:47:42.691977 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.691993 kubelet[1944]: W0710 00:47:42.691991 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.692075 kubelet[1944]: E0710 00:47:42.692006 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.692215 kubelet[1944]: E0710 00:47:42.692199 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.692215 kubelet[1944]: W0710 00:47:42.692211 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.692309 kubelet[1944]: E0710 00:47:42.692225 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.692309 kubelet[1944]: I0710 00:47:42.692242 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/d5ed6e84-883c-4226-9ad8-831f6e16569a-kubelet-dir\") pod \"csi-node-driver-qlpnz\" (UID: \"d5ed6e84-883c-4226-9ad8-831f6e16569a\") " pod="calico-system/csi-node-driver-qlpnz" Jul 10 00:47:42.692406 kubelet[1944]: E0710 00:47:42.692392 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.692406 kubelet[1944]: W0710 00:47:42.692405 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.692527 kubelet[1944]: E0710 00:47:42.692490 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.692559 kubelet[1944]: I0710 00:47:42.692543 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jgwlb\" (UniqueName: \"kubernetes.io/projected/d5ed6e84-883c-4226-9ad8-831f6e16569a-kube-api-access-jgwlb\") pod \"csi-node-driver-qlpnz\" (UID: \"d5ed6e84-883c-4226-9ad8-831f6e16569a\") " pod="calico-system/csi-node-driver-qlpnz" Jul 10 00:47:42.692626 kubelet[1944]: E0710 00:47:42.692609 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.692626 kubelet[1944]: W0710 00:47:42.692621 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.692716 kubelet[1944]: E0710 00:47:42.692646 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.692857 kubelet[1944]: E0710 00:47:42.692840 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.692857 kubelet[1944]: W0710 00:47:42.692852 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.692936 kubelet[1944]: E0710 00:47:42.692866 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.693035 kubelet[1944]: E0710 00:47:42.693023 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.693035 kubelet[1944]: W0710 00:47:42.693032 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.693089 kubelet[1944]: E0710 00:47:42.693043 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.693247 kubelet[1944]: E0710 00:47:42.693222 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.693247 kubelet[1944]: W0710 00:47:42.693237 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.693302 kubelet[1944]: E0710 00:47:42.693245 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.693434 kubelet[1944]: E0710 00:47:42.693422 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.693434 kubelet[1944]: W0710 00:47:42.693432 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.693491 kubelet[1944]: E0710 00:47:42.693439 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.693621 kubelet[1944]: E0710 00:47:42.693608 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.693621 kubelet[1944]: W0710 00:47:42.693617 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.693688 kubelet[1944]: E0710 00:47:42.693626 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.771680 env[1202]: time="2025-07-10T00:47:42.771627613Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-6cz5r,Uid:ccbdfce8-f039-40fe-8478-54738a8e90a8,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:42.795004 env[1202]: time="2025-07-10T00:47:42.791002232Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:42.795004 env[1202]: time="2025-07-10T00:47:42.791048830Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:42.795004 env[1202]: time="2025-07-10T00:47:42.791058318Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:42.795004 env[1202]: time="2025-07-10T00:47:42.791233228Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3550aaccaf62590a1adfc072fcca21e42ccb1fd28a238a8b1f6bc0fa98357e31 pid=2446 runtime=io.containerd.runc.v2 Jul 10 00:47:42.795483 kubelet[1944]: E0710 00:47:42.795323 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.795483 kubelet[1944]: W0710 00:47:42.795344 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.795483 kubelet[1944]: E0710 00:47:42.795364 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.795743 kubelet[1944]: E0710 00:47:42.795681 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.795743 kubelet[1944]: W0710 00:47:42.795726 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.795827 kubelet[1944]: E0710 00:47:42.795759 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.796085 kubelet[1944]: E0710 00:47:42.796062 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.796085 kubelet[1944]: W0710 00:47:42.796077 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.796085 kubelet[1944]: E0710 00:47:42.796088 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.796326 kubelet[1944]: E0710 00:47:42.796311 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.796326 kubelet[1944]: W0710 00:47:42.796322 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.796413 kubelet[1944]: E0710 00:47:42.796334 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.796543 kubelet[1944]: E0710 00:47:42.796528 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.796543 kubelet[1944]: W0710 00:47:42.796538 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.796634 kubelet[1944]: E0710 00:47:42.796549 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.798467 kubelet[1944]: E0710 00:47:42.797548 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.798467 kubelet[1944]: W0710 00:47:42.797561 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.798467 kubelet[1944]: E0710 00:47:42.797761 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.798467 kubelet[1944]: E0710 00:47:42.797814 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.798467 kubelet[1944]: W0710 00:47:42.797820 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.798467 kubelet[1944]: E0710 00:47:42.797902 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.798467 kubelet[1944]: E0710 00:47:42.798002 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.798467 kubelet[1944]: W0710 00:47:42.798008 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.798467 kubelet[1944]: E0710 00:47:42.798074 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.799096 kubelet[1944]: E0710 00:47:42.799061 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.799096 kubelet[1944]: W0710 00:47:42.799079 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.799166 kubelet[1944]: E0710 00:47:42.799117 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.799279 kubelet[1944]: E0710 00:47:42.799252 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.799279 kubelet[1944]: W0710 00:47:42.799270 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.799360 kubelet[1944]: E0710 00:47:42.799344 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.799449 kubelet[1944]: E0710 00:47:42.799437 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.799449 kubelet[1944]: W0710 00:47:42.799447 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.799525 kubelet[1944]: E0710 00:47:42.799511 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.799594 kubelet[1944]: E0710 00:47:42.799582 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.799594 kubelet[1944]: W0710 00:47:42.799592 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.799791 kubelet[1944]: E0710 00:47:42.799656 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.800010 kubelet[1944]: E0710 00:47:42.799993 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.800010 kubelet[1944]: W0710 00:47:42.800005 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.800119 kubelet[1944]: E0710 00:47:42.800102 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.800175 kubelet[1944]: E0710 00:47:42.800164 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.800175 kubelet[1944]: W0710 00:47:42.800173 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.800221 kubelet[1944]: E0710 00:47:42.800184 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.800368 kubelet[1944]: E0710 00:47:42.800353 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.800368 kubelet[1944]: W0710 00:47:42.800362 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.800436 kubelet[1944]: E0710 00:47:42.800376 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.800636 kubelet[1944]: E0710 00:47:42.800621 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.800636 kubelet[1944]: W0710 00:47:42.800632 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.800700 kubelet[1944]: E0710 00:47:42.800642 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.800855 kubelet[1944]: E0710 00:47:42.800842 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.800855 kubelet[1944]: W0710 00:47:42.800853 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.800916 kubelet[1944]: E0710 00:47:42.800898 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.801032 kubelet[1944]: E0710 00:47:42.801017 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.801032 kubelet[1944]: W0710 00:47:42.801027 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.801100 kubelet[1944]: E0710 00:47:42.801051 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.801187 kubelet[1944]: E0710 00:47:42.801173 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.801187 kubelet[1944]: W0710 00:47:42.801183 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.801264 kubelet[1944]: E0710 00:47:42.801251 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.801418 kubelet[1944]: E0710 00:47:42.801402 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.801418 kubelet[1944]: W0710 00:47:42.801412 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.801486 kubelet[1944]: E0710 00:47:42.801439 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.801612 kubelet[1944]: E0710 00:47:42.801597 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.801612 kubelet[1944]: W0710 00:47:42.801608 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.801677 kubelet[1944]: E0710 00:47:42.801619 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.801845 kubelet[1944]: E0710 00:47:42.801832 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.801845 kubelet[1944]: W0710 00:47:42.801843 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.801906 kubelet[1944]: E0710 00:47:42.801854 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.802038 kubelet[1944]: E0710 00:47:42.802024 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.802038 kubelet[1944]: W0710 00:47:42.802036 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.802089 kubelet[1944]: E0710 00:47:42.802047 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.802813 kubelet[1944]: E0710 00:47:42.802795 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.802813 kubelet[1944]: W0710 00:47:42.802808 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.802888 kubelet[1944]: E0710 00:47:42.802820 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.803050 kubelet[1944]: E0710 00:47:42.803026 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.803050 kubelet[1944]: W0710 00:47:42.803038 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.803050 kubelet[1944]: E0710 00:47:42.803047 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.809314 systemd[1]: Started cri-containerd-3550aaccaf62590a1adfc072fcca21e42ccb1fd28a238a8b1f6bc0fa98357e31.scope. Jul 10 00:47:42.810628 kubelet[1944]: E0710 00:47:42.810569 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:42.810628 kubelet[1944]: W0710 00:47:42.810582 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:42.810628 kubelet[1944]: E0710 00:47:42.810594 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:42.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.818000 audit: BPF prog-id=122 op=LOAD Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2446 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335353061616363616636323539306131616466633037326663636132 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2446 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335353061616363616636323539306131616466633037326663636132 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit: BPF prog-id=123 op=LOAD Jul 10 00:47:42.819000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000309040 items=0 ppid=2446 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335353061616363616636323539306131616466633037326663636132 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit: BPF prog-id=124 op=LOAD Jul 10 00:47:42.819000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000309088 items=0 ppid=2446 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335353061616363616636323539306131616466633037326663636132 Jul 10 00:47:42.819000 audit: BPF prog-id=124 op=UNLOAD Jul 10 00:47:42.819000 audit: BPF prog-id=123 op=UNLOAD Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { perfmon } for pid=2453 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit[2453]: AVC avc: denied { bpf } for pid=2453 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:42.819000 audit: BPF prog-id=125 op=LOAD Jul 10 00:47:42.819000 audit[2453]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000309498 items=0 ppid=2446 pid=2453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335353061616363616636323539306131616466633037326663636132 Jul 10 00:47:42.834258 env[1202]: time="2025-07-10T00:47:42.834208182Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-6cz5r,Uid:ccbdfce8-f039-40fe-8478-54738a8e90a8,Namespace:calico-system,Attempt:0,} returns sandbox id \"3550aaccaf62590a1adfc072fcca21e42ccb1fd28a238a8b1f6bc0fa98357e31\"" Jul 10 00:47:42.948000 audit[2507]: NETFILTER_CFG table=filter:97 family=2 entries=22 op=nft_register_rule pid=2507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:42.948000 audit[2507]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffe09bc0a0 a2=0 a3=7fffe09bc08c items=0 ppid=2051 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.948000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:42.952000 audit[2507]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:42.952000 audit[2507]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffe09bc0a0 a2=0 a3=0 items=0 ppid=2051 pid=2507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:42.952000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:43.929522 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount836037357.mount: Deactivated successfully. Jul 10 00:47:44.575257 kubelet[1944]: E0710 00:47:44.575211 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qlpnz" podUID="d5ed6e84-883c-4226-9ad8-831f6e16569a" Jul 10 00:47:44.765288 env[1202]: time="2025-07-10T00:47:44.765239940Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:44.767380 env[1202]: time="2025-07-10T00:47:44.767329881Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:44.768760 env[1202]: time="2025-07-10T00:47:44.768729451Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:44.770162 env[1202]: time="2025-07-10T00:47:44.770128249Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:44.770609 env[1202]: time="2025-07-10T00:47:44.770575803Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 10 00:47:44.771684 env[1202]: time="2025-07-10T00:47:44.771590446Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 10 00:47:44.785657 env[1202]: time="2025-07-10T00:47:44.785604677Z" level=info msg="CreateContainer within sandbox \"6a052404b6a532749e69eec22d7e1ae6436bf99002f56839ab503f50dcd7b992\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 10 00:47:44.910972 env[1202]: time="2025-07-10T00:47:44.910871833Z" level=info msg="CreateContainer within sandbox \"6a052404b6a532749e69eec22d7e1ae6436bf99002f56839ab503f50dcd7b992\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"0595e935859582090815f516eb7a5dfd2eac155efc1ab1c2b02a7a62be88dc17\"" Jul 10 00:47:44.912372 env[1202]: time="2025-07-10T00:47:44.912315085Z" level=info msg="StartContainer for \"0595e935859582090815f516eb7a5dfd2eac155efc1ab1c2b02a7a62be88dc17\"" Jul 10 00:47:44.928453 systemd[1]: Started cri-containerd-0595e935859582090815f516eb7a5dfd2eac155efc1ab1c2b02a7a62be88dc17.scope. Jul 10 00:47:44.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.944543 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 10 00:47:44.944607 kernel: audit: type=1400 audit(1752108464.941:963): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.950525 kernel: audit: type=1400 audit(1752108464.941:964): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.950571 kernel: audit: type=1400 audit(1752108464.941:965): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.956267 kernel: audit: type=1400 audit(1752108464.941:966): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.956314 kernel: audit: type=1400 audit(1752108464.941:967): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.962113 kernel: audit: type=1400 audit(1752108464.941:968): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.962185 kernel: audit: type=1400 audit(1752108464.941:969): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.965069 kernel: audit: type=1400 audit(1752108464.941:970): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.941000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.941000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.970788 kernel: audit: type=1400 audit(1752108464.941:971): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.970832 kernel: audit: type=1400 audit(1752108464.943:972): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit: BPF prog-id=126 op=LOAD Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2366 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035393565393335383539353832303930383135663531366562376135 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2366 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035393565393335383539353832303930383135663531366562376135 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.946000 audit: BPF prog-id=127 op=LOAD Jul 10 00:47:44.946000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000290b50 items=0 ppid=2366 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035393565393335383539353832303930383135663531366562376135 Jul 10 00:47:44.955000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.955000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.955000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.955000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.955000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.955000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.955000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.955000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.955000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.955000 audit: BPF prog-id=128 op=LOAD Jul 10 00:47:44.955000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000290b98 items=0 ppid=2366 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.955000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035393565393335383539353832303930383135663531366562376135 Jul 10 00:47:44.961000 audit: BPF prog-id=128 op=UNLOAD Jul 10 00:47:44.961000 audit: BPF prog-id=127 op=UNLOAD Jul 10 00:47:44.961000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.961000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.961000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.961000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.961000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.961000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.961000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.961000 audit[2518]: AVC avc: denied { perfmon } for pid=2518 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.961000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.961000 audit[2518]: AVC avc: denied { bpf } for pid=2518 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.961000 audit: BPF prog-id=129 op=LOAD Jul 10 00:47:44.961000 audit[2518]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000290fa8 items=0 ppid=2366 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035393565393335383539353832303930383135663531366562376135 Jul 10 00:47:45.125820 env[1202]: time="2025-07-10T00:47:45.125758599Z" level=info msg="StartContainer for \"0595e935859582090815f516eb7a5dfd2eac155efc1ab1c2b02a7a62be88dc17\" returns successfully" Jul 10 00:47:45.626223 kubelet[1944]: E0710 00:47:45.626188 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:45.636521 kubelet[1944]: I0710 00:47:45.636459 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-8597864b59-8g8nl" podStartSLOduration=2.42058802 podStartE2EDuration="4.636442555s" podCreationTimestamp="2025-07-10 00:47:41 +0000 UTC" firstStartedPulling="2025-07-10 00:47:42.555535072 +0000 UTC m=+19.062677627" lastFinishedPulling="2025-07-10 00:47:44.771389617 +0000 UTC m=+21.278532162" observedRunningTime="2025-07-10 00:47:45.636265151 +0000 UTC m=+22.143407706" watchObservedRunningTime="2025-07-10 00:47:45.636442555 +0000 UTC m=+22.143585110" Jul 10 00:47:45.697128 kubelet[1944]: E0710 00:47:45.697088 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.697128 kubelet[1944]: W0710 00:47:45.697117 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.697262 kubelet[1944]: E0710 00:47:45.697143 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.697451 kubelet[1944]: E0710 00:47:45.697423 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.697451 kubelet[1944]: W0710 00:47:45.697442 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.697516 kubelet[1944]: E0710 00:47:45.697455 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.697730 kubelet[1944]: E0710 00:47:45.697677 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.697730 kubelet[1944]: W0710 00:47:45.697694 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.697730 kubelet[1944]: E0710 00:47:45.697732 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.698013 kubelet[1944]: E0710 00:47:45.697993 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.698013 kubelet[1944]: W0710 00:47:45.698009 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.698091 kubelet[1944]: E0710 00:47:45.698021 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.698249 kubelet[1944]: E0710 00:47:45.698231 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.698249 kubelet[1944]: W0710 00:47:45.698246 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.698320 kubelet[1944]: E0710 00:47:45.698257 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.698475 kubelet[1944]: E0710 00:47:45.698456 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.698475 kubelet[1944]: W0710 00:47:45.698471 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.698550 kubelet[1944]: E0710 00:47:45.698483 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.698700 kubelet[1944]: E0710 00:47:45.698679 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.698700 kubelet[1944]: W0710 00:47:45.698697 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.698798 kubelet[1944]: E0710 00:47:45.698730 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.698953 kubelet[1944]: E0710 00:47:45.698934 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.698953 kubelet[1944]: W0710 00:47:45.698949 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.699030 kubelet[1944]: E0710 00:47:45.698961 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.699183 kubelet[1944]: E0710 00:47:45.699164 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.699183 kubelet[1944]: W0710 00:47:45.699179 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.699251 kubelet[1944]: E0710 00:47:45.699192 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.699409 kubelet[1944]: E0710 00:47:45.699390 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.699409 kubelet[1944]: W0710 00:47:45.699406 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.699496 kubelet[1944]: E0710 00:47:45.699418 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.699638 kubelet[1944]: E0710 00:47:45.699610 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.699638 kubelet[1944]: W0710 00:47:45.699624 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.699730 kubelet[1944]: E0710 00:47:45.699648 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.699873 kubelet[1944]: E0710 00:47:45.699854 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.699873 kubelet[1944]: W0710 00:47:45.699870 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.699949 kubelet[1944]: E0710 00:47:45.699880 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.700116 kubelet[1944]: E0710 00:47:45.700096 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.700116 kubelet[1944]: W0710 00:47:45.700113 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.700191 kubelet[1944]: E0710 00:47:45.700124 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.700343 kubelet[1944]: E0710 00:47:45.700323 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.700343 kubelet[1944]: W0710 00:47:45.700337 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.700411 kubelet[1944]: E0710 00:47:45.700349 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.700557 kubelet[1944]: E0710 00:47:45.700538 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.700557 kubelet[1944]: W0710 00:47:45.700553 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.700641 kubelet[1944]: E0710 00:47:45.700564 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.716895 kubelet[1944]: E0710 00:47:45.716866 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.716895 kubelet[1944]: W0710 00:47:45.716882 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.716895 kubelet[1944]: E0710 00:47:45.716893 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.717318 kubelet[1944]: E0710 00:47:45.717300 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.717318 kubelet[1944]: W0710 00:47:45.717316 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.717394 kubelet[1944]: E0710 00:47:45.717337 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.717700 kubelet[1944]: E0710 00:47:45.717658 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.717700 kubelet[1944]: W0710 00:47:45.717691 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.717794 kubelet[1944]: E0710 00:47:45.717732 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.717941 kubelet[1944]: E0710 00:47:45.717926 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.717941 kubelet[1944]: W0710 00:47:45.717937 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.718025 kubelet[1944]: E0710 00:47:45.717951 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.718217 kubelet[1944]: E0710 00:47:45.718194 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.718217 kubelet[1944]: W0710 00:47:45.718205 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.718273 kubelet[1944]: E0710 00:47:45.718219 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.718437 kubelet[1944]: E0710 00:47:45.718424 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.718437 kubelet[1944]: W0710 00:47:45.718434 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.718487 kubelet[1944]: E0710 00:47:45.718447 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.718769 kubelet[1944]: E0710 00:47:45.718748 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.718769 kubelet[1944]: W0710 00:47:45.718766 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.718845 kubelet[1944]: E0710 00:47:45.718780 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.719046 kubelet[1944]: E0710 00:47:45.719027 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.719046 kubelet[1944]: W0710 00:47:45.719041 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.719122 kubelet[1944]: E0710 00:47:45.719080 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.719245 kubelet[1944]: E0710 00:47:45.719225 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.719245 kubelet[1944]: W0710 00:47:45.719240 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.719322 kubelet[1944]: E0710 00:47:45.719267 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.719455 kubelet[1944]: E0710 00:47:45.719438 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.719455 kubelet[1944]: W0710 00:47:45.719453 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.719510 kubelet[1944]: E0710 00:47:45.719471 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.719702 kubelet[1944]: E0710 00:47:45.719687 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.719747 kubelet[1944]: W0710 00:47:45.719701 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.719747 kubelet[1944]: E0710 00:47:45.719735 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.719927 kubelet[1944]: E0710 00:47:45.719913 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.719956 kubelet[1944]: W0710 00:47:45.719927 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.719956 kubelet[1944]: E0710 00:47:45.719945 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.720210 kubelet[1944]: E0710 00:47:45.720194 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.720241 kubelet[1944]: W0710 00:47:45.720210 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.720241 kubelet[1944]: E0710 00:47:45.720228 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.720448 kubelet[1944]: E0710 00:47:45.720428 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.720448 kubelet[1944]: W0710 00:47:45.720442 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.720525 kubelet[1944]: E0710 00:47:45.720452 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.720655 kubelet[1944]: E0710 00:47:45.720638 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.720655 kubelet[1944]: W0710 00:47:45.720653 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.720716 kubelet[1944]: E0710 00:47:45.720670 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.720905 kubelet[1944]: E0710 00:47:45.720892 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.720905 kubelet[1944]: W0710 00:47:45.720902 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.720958 kubelet[1944]: E0710 00:47:45.720916 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.721195 kubelet[1944]: E0710 00:47:45.721170 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.721195 kubelet[1944]: W0710 00:47:45.721187 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.721263 kubelet[1944]: E0710 00:47:45.721203 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:45.721401 kubelet[1944]: E0710 00:47:45.721379 1944 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:45.721401 kubelet[1944]: W0710 00:47:45.721395 1944 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:45.721450 kubelet[1944]: E0710 00:47:45.721406 1944 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:46.066485 env[1202]: time="2025-07-10T00:47:46.066417857Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:46.068643 env[1202]: time="2025-07-10T00:47:46.068598887Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:46.070517 env[1202]: time="2025-07-10T00:47:46.070467239Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:46.072053 env[1202]: time="2025-07-10T00:47:46.072017059Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:46.072358 env[1202]: time="2025-07-10T00:47:46.072317065Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 10 00:47:46.074369 env[1202]: time="2025-07-10T00:47:46.074340819Z" level=info msg="CreateContainer within sandbox \"3550aaccaf62590a1adfc072fcca21e42ccb1fd28a238a8b1f6bc0fa98357e31\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 10 00:47:46.086037 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3168247394.mount: Deactivated successfully. Jul 10 00:47:46.092353 env[1202]: time="2025-07-10T00:47:46.092297883Z" level=info msg="CreateContainer within sandbox \"3550aaccaf62590a1adfc072fcca21e42ccb1fd28a238a8b1f6bc0fa98357e31\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"fa6563455e2253d2e76cc9b8e6ff92622aa8ff3b19aa9f76535ae851b42fd99e\"" Jul 10 00:47:46.093000 env[1202]: time="2025-07-10T00:47:46.092960232Z" level=info msg="StartContainer for \"fa6563455e2253d2e76cc9b8e6ff92622aa8ff3b19aa9f76535ae851b42fd99e\"" Jul 10 00:47:46.120231 systemd[1]: Started cri-containerd-fa6563455e2253d2e76cc9b8e6ff92622aa8ff3b19aa9f76535ae851b42fd99e.scope. Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f2ab5fe4b18 items=0 ppid=2446 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661363536333435356532323533643265373663633962386536666639 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit: BPF prog-id=130 op=LOAD Jul 10 00:47:46.133000 audit[2593]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00030a888 items=0 ppid=2446 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661363536333435356532323533643265373663633962386536666639 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit: BPF prog-id=131 op=LOAD Jul 10 00:47:46.133000 audit[2593]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00030a8d8 items=0 ppid=2446 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661363536333435356532323533643265373663633962386536666639 Jul 10 00:47:46.133000 audit: BPF prog-id=131 op=UNLOAD Jul 10 00:47:46.133000 audit: BPF prog-id=130 op=UNLOAD Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.133000 audit: BPF prog-id=132 op=LOAD Jul 10 00:47:46.133000 audit[2593]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00030a968 items=0 ppid=2446 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661363536333435356532323533643265373663633962386536666639 Jul 10 00:47:46.146599 env[1202]: time="2025-07-10T00:47:46.146561155Z" level=info msg="StartContainer for \"fa6563455e2253d2e76cc9b8e6ff92622aa8ff3b19aa9f76535ae851b42fd99e\" returns successfully" Jul 10 00:47:46.154147 systemd[1]: cri-containerd-fa6563455e2253d2e76cc9b8e6ff92622aa8ff3b19aa9f76535ae851b42fd99e.scope: Deactivated successfully. Jul 10 00:47:46.157000 audit: BPF prog-id=132 op=UNLOAD Jul 10 00:47:46.221515 env[1202]: time="2025-07-10T00:47:46.221458936Z" level=info msg="shim disconnected" id=fa6563455e2253d2e76cc9b8e6ff92622aa8ff3b19aa9f76535ae851b42fd99e Jul 10 00:47:46.221515 env[1202]: time="2025-07-10T00:47:46.221508550Z" level=warning msg="cleaning up after shim disconnected" id=fa6563455e2253d2e76cc9b8e6ff92622aa8ff3b19aa9f76535ae851b42fd99e namespace=k8s.io Jul 10 00:47:46.221515 env[1202]: time="2025-07-10T00:47:46.221517897Z" level=info msg="cleaning up dead shim" Jul 10 00:47:46.228395 env[1202]: time="2025-07-10T00:47:46.228356245Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:47:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2631 runtime=io.containerd.runc.v2\n" Jul 10 00:47:46.576623 kubelet[1944]: E0710 00:47:46.576545 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qlpnz" podUID="d5ed6e84-883c-4226-9ad8-831f6e16569a" Jul 10 00:47:46.629898 kubelet[1944]: I0710 00:47:46.629832 1944 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:47:46.630274 kubelet[1944]: E0710 00:47:46.630155 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:46.631075 env[1202]: time="2025-07-10T00:47:46.631023911Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 10 00:47:46.777783 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fa6563455e2253d2e76cc9b8e6ff92622aa8ff3b19aa9f76535ae851b42fd99e-rootfs.mount: Deactivated successfully. Jul 10 00:47:48.575323 kubelet[1944]: E0710 00:47:48.575268 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qlpnz" podUID="d5ed6e84-883c-4226-9ad8-831f6e16569a" Jul 10 00:47:50.021289 env[1202]: time="2025-07-10T00:47:50.021230697Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:50.023328 env[1202]: time="2025-07-10T00:47:50.023292388Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:50.024942 env[1202]: time="2025-07-10T00:47:50.024888522Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:50.026337 env[1202]: time="2025-07-10T00:47:50.026289620Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:50.026800 env[1202]: time="2025-07-10T00:47:50.026774423Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 10 00:47:50.030893 env[1202]: time="2025-07-10T00:47:50.030863621Z" level=info msg="CreateContainer within sandbox \"3550aaccaf62590a1adfc072fcca21e42ccb1fd28a238a8b1f6bc0fa98357e31\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 10 00:47:50.044254 env[1202]: time="2025-07-10T00:47:50.044214295Z" level=info msg="CreateContainer within sandbox \"3550aaccaf62590a1adfc072fcca21e42ccb1fd28a238a8b1f6bc0fa98357e31\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"cfa5c60312f9477435c300b0a0523df1729cc61dca305fb62c78ef8bab9b33ef\"" Jul 10 00:47:50.044678 env[1202]: time="2025-07-10T00:47:50.044645717Z" level=info msg="StartContainer for \"cfa5c60312f9477435c300b0a0523df1729cc61dca305fb62c78ef8bab9b33ef\"" Jul 10 00:47:50.065344 systemd[1]: Started cri-containerd-cfa5c60312f9477435c300b0a0523df1729cc61dca305fb62c78ef8bab9b33ef.scope. Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.083058 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 10 00:47:50.083114 kernel: audit: type=1400 audit(1752108470.081:988): avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit[2657]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fc8f01c7488 items=0 ppid=2446 pid=2657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.090204 kernel: audit: type=1300 audit(1752108470.081:988): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fc8f01c7488 items=0 ppid=2446 pid=2657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.090263 kernel: audit: type=1327 audit(1752108470.081:988): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366613563363033313266393437373433356333303062306130353233 Jul 10 00:47:50.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366613563363033313266393437373433356333303062306130353233 Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.101303 kernel: audit: type=1400 audit(1752108470.081:989): avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.101466 kernel: audit: type=1400 audit(1752108470.081:989): avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.105070 kernel: audit: type=1400 audit(1752108470.081:989): avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.105128 kernel: audit: type=1400 audit(1752108470.081:989): avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.110700 kernel: audit: type=1400 audit(1752108470.081:989): avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.112969 kernel: audit: type=1400 audit(1752108470.081:989): avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.119467 kernel: audit: type=1400 audit(1752108470.081:989): avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.081000 audit: BPF prog-id=133 op=LOAD Jul 10 00:47:50.081000 audit[2657]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000261ba8 items=0 ppid=2446 pid=2657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.081000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366613563363033313266393437373433356333303062306130353233 Jul 10 00:47:50.085000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.085000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.085000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.085000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.085000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.085000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.085000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.085000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.085000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.085000 audit: BPF prog-id=134 op=LOAD Jul 10 00:47:50.085000 audit[2657]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000261bf8 items=0 ppid=2446 pid=2657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366613563363033313266393437373433356333303062306130353233 Jul 10 00:47:50.093000 audit: BPF prog-id=134 op=UNLOAD Jul 10 00:47:50.093000 audit: BPF prog-id=133 op=UNLOAD Jul 10 00:47:50.093000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.093000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.093000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.093000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.093000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.093000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.093000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.093000 audit[2657]: AVC avc: denied { perfmon } for pid=2657 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.093000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.093000 audit[2657]: AVC avc: denied { bpf } for pid=2657 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.093000 audit: BPF prog-id=135 op=LOAD Jul 10 00:47:50.093000 audit[2657]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000261c88 items=0 ppid=2446 pid=2657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.093000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366613563363033313266393437373433356333303062306130353233 Jul 10 00:47:50.284730 env[1202]: time="2025-07-10T00:47:50.284579133Z" level=info msg="StartContainer for \"cfa5c60312f9477435c300b0a0523df1729cc61dca305fb62c78ef8bab9b33ef\" returns successfully" Jul 10 00:47:50.575788 kubelet[1944]: E0710 00:47:50.575641 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qlpnz" podUID="d5ed6e84-883c-4226-9ad8-831f6e16569a" Jul 10 00:47:51.452355 env[1202]: time="2025-07-10T00:47:51.452283589Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:47:51.454416 systemd[1]: cri-containerd-cfa5c60312f9477435c300b0a0523df1729cc61dca305fb62c78ef8bab9b33ef.scope: Deactivated successfully. Jul 10 00:47:51.458000 audit: BPF prog-id=135 op=UNLOAD Jul 10 00:47:51.472775 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cfa5c60312f9477435c300b0a0523df1729cc61dca305fb62c78ef8bab9b33ef-rootfs.mount: Deactivated successfully. Jul 10 00:47:51.486442 env[1202]: time="2025-07-10T00:47:51.486395733Z" level=info msg="shim disconnected" id=cfa5c60312f9477435c300b0a0523df1729cc61dca305fb62c78ef8bab9b33ef Jul 10 00:47:51.486553 env[1202]: time="2025-07-10T00:47:51.486443963Z" level=warning msg="cleaning up after shim disconnected" id=cfa5c60312f9477435c300b0a0523df1729cc61dca305fb62c78ef8bab9b33ef namespace=k8s.io Jul 10 00:47:51.486553 env[1202]: time="2025-07-10T00:47:51.486453811Z" level=info msg="cleaning up dead shim" Jul 10 00:47:51.493657 env[1202]: time="2025-07-10T00:47:51.493629708Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:47:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2699 runtime=io.containerd.runc.v2\n" Jul 10 00:47:51.534351 kubelet[1944]: I0710 00:47:51.534309 1944 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 10 00:47:51.557048 systemd[1]: Created slice kubepods-burstable-pod92f142e6_5a1f_4990_8f0f_7b715f748a50.slice. Jul 10 00:47:51.566686 systemd[1]: Created slice kubepods-besteffort-podf6f00b3e_a850_4a67_9877_16e2b2fdf120.slice. Jul 10 00:47:51.575555 systemd[1]: Created slice kubepods-besteffort-pod2883d529_10fa_4514_a96f_6c1f5ac98c7c.slice. Jul 10 00:47:51.583944 systemd[1]: Created slice kubepods-besteffort-pod10193579_ce3e_4a12_b394_8f9d2869720e.slice. Jul 10 00:47:51.587678 systemd[1]: Created slice kubepods-besteffort-poda73e65fd_c9a6_4aca_80b1_99749f4de040.slice. Jul 10 00:47:51.593046 systemd[1]: Created slice kubepods-besteffort-podb1a6eea7_3897_4f93_bcfd_0f8cea3cbd89.slice. Jul 10 00:47:51.598700 systemd[1]: Created slice kubepods-burstable-pod5fdf3fd1_ad69_475d_821f_cc09b8131811.slice. Jul 10 00:47:51.603352 systemd[1]: Created slice kubepods-besteffort-pod85922549_c507_4cf8_9b7c_dad60d75d14c.slice. Jul 10 00:47:51.661545 kubelet[1944]: I0710 00:47:51.661496 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89-config\") pod \"goldmane-58fd7646b9-h48tl\" (UID: \"b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89\") " pod="calico-system/goldmane-58fd7646b9-h48tl" Jul 10 00:47:51.661545 kubelet[1944]: I0710 00:47:51.661537 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5kjv9\" (UniqueName: \"kubernetes.io/projected/5fdf3fd1-ad69-475d-821f-cc09b8131811-kube-api-access-5kjv9\") pod \"coredns-7c65d6cfc9-j9s7v\" (UID: \"5fdf3fd1-ad69-475d-821f-cc09b8131811\") " pod="kube-system/coredns-7c65d6cfc9-j9s7v" Jul 10 00:47:51.661865 kubelet[1944]: I0710 00:47:51.661554 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qsc6r\" (UniqueName: \"kubernetes.io/projected/f6f00b3e-a850-4a67-9877-16e2b2fdf120-kube-api-access-qsc6r\") pod \"calico-apiserver-6f4f84749-bc2qs\" (UID: \"f6f00b3e-a850-4a67-9877-16e2b2fdf120\") " pod="calico-apiserver/calico-apiserver-6f4f84749-bc2qs" Jul 10 00:47:51.661865 kubelet[1944]: I0710 00:47:51.661620 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89-goldmane-key-pair\") pod \"goldmane-58fd7646b9-h48tl\" (UID: \"b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89\") " pod="calico-system/goldmane-58fd7646b9-h48tl" Jul 10 00:47:51.661865 kubelet[1944]: I0710 00:47:51.661649 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9qkph\" (UniqueName: \"kubernetes.io/projected/10193579-ce3e-4a12-b394-8f9d2869720e-kube-api-access-9qkph\") pod \"calico-kube-controllers-7c6b46bdd-r7ps4\" (UID: \"10193579-ce3e-4a12-b394-8f9d2869720e\") " pod="calico-system/calico-kube-controllers-7c6b46bdd-r7ps4" Jul 10 00:47:51.661865 kubelet[1944]: I0710 00:47:51.661664 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-h48tl\" (UID: \"b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89\") " pod="calico-system/goldmane-58fd7646b9-h48tl" Jul 10 00:47:51.661865 kubelet[1944]: I0710 00:47:51.661680 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n885b\" (UniqueName: \"kubernetes.io/projected/85922549-c507-4cf8-9b7c-dad60d75d14c-kube-api-access-n885b\") pod \"whisker-764bb4f486-6jgng\" (UID: \"85922549-c507-4cf8-9b7c-dad60d75d14c\") " pod="calico-system/whisker-764bb4f486-6jgng" Jul 10 00:47:51.661997 kubelet[1944]: I0710 00:47:51.661696 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/2883d529-10fa-4514-a96f-6c1f5ac98c7c-calico-apiserver-certs\") pod \"calico-apiserver-6f4f84749-ccnrs\" (UID: \"2883d529-10fa-4514-a96f-6c1f5ac98c7c\") " pod="calico-apiserver/calico-apiserver-6f4f84749-ccnrs" Jul 10 00:47:51.661997 kubelet[1944]: I0710 00:47:51.661721 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lmkgn\" (UniqueName: \"kubernetes.io/projected/2883d529-10fa-4514-a96f-6c1f5ac98c7c-kube-api-access-lmkgn\") pod \"calico-apiserver-6f4f84749-ccnrs\" (UID: \"2883d529-10fa-4514-a96f-6c1f5ac98c7c\") " pod="calico-apiserver/calico-apiserver-6f4f84749-ccnrs" Jul 10 00:47:51.661997 kubelet[1944]: I0710 00:47:51.661735 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/10193579-ce3e-4a12-b394-8f9d2869720e-tigera-ca-bundle\") pod \"calico-kube-controllers-7c6b46bdd-r7ps4\" (UID: \"10193579-ce3e-4a12-b394-8f9d2869720e\") " pod="calico-system/calico-kube-controllers-7c6b46bdd-r7ps4" Jul 10 00:47:51.661997 kubelet[1944]: I0710 00:47:51.661752 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f6f00b3e-a850-4a67-9877-16e2b2fdf120-calico-apiserver-certs\") pod \"calico-apiserver-6f4f84749-bc2qs\" (UID: \"f6f00b3e-a850-4a67-9877-16e2b2fdf120\") " pod="calico-apiserver/calico-apiserver-6f4f84749-bc2qs" Jul 10 00:47:51.661997 kubelet[1944]: I0710 00:47:51.661767 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a73e65fd-c9a6-4aca-80b1-99749f4de040-calico-apiserver-certs\") pod \"calico-apiserver-67c56776df-9wrhd\" (UID: \"a73e65fd-c9a6-4aca-80b1-99749f4de040\") " pod="calico-apiserver/calico-apiserver-67c56776df-9wrhd" Jul 10 00:47:51.662221 kubelet[1944]: I0710 00:47:51.661781 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/5fdf3fd1-ad69-475d-821f-cc09b8131811-config-volume\") pod \"coredns-7c65d6cfc9-j9s7v\" (UID: \"5fdf3fd1-ad69-475d-821f-cc09b8131811\") " pod="kube-system/coredns-7c65d6cfc9-j9s7v" Jul 10 00:47:51.662221 kubelet[1944]: I0710 00:47:51.661796 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wmqkp\" (UniqueName: \"kubernetes.io/projected/a73e65fd-c9a6-4aca-80b1-99749f4de040-kube-api-access-wmqkp\") pod \"calico-apiserver-67c56776df-9wrhd\" (UID: \"a73e65fd-c9a6-4aca-80b1-99749f4de040\") " pod="calico-apiserver/calico-apiserver-67c56776df-9wrhd" Jul 10 00:47:51.662221 kubelet[1944]: I0710 00:47:51.661812 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bwbhm\" (UniqueName: \"kubernetes.io/projected/92f142e6-5a1f-4990-8f0f-7b715f748a50-kube-api-access-bwbhm\") pod \"coredns-7c65d6cfc9-5nrl8\" (UID: \"92f142e6-5a1f-4990-8f0f-7b715f748a50\") " pod="kube-system/coredns-7c65d6cfc9-5nrl8" Jul 10 00:47:51.662221 kubelet[1944]: I0710 00:47:51.661834 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/85922549-c507-4cf8-9b7c-dad60d75d14c-whisker-ca-bundle\") pod \"whisker-764bb4f486-6jgng\" (UID: \"85922549-c507-4cf8-9b7c-dad60d75d14c\") " pod="calico-system/whisker-764bb4f486-6jgng" Jul 10 00:47:51.662221 kubelet[1944]: I0710 00:47:51.661849 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8jl9l\" (UniqueName: \"kubernetes.io/projected/b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89-kube-api-access-8jl9l\") pod \"goldmane-58fd7646b9-h48tl\" (UID: \"b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89\") " pod="calico-system/goldmane-58fd7646b9-h48tl" Jul 10 00:47:51.662346 kubelet[1944]: I0710 00:47:51.661862 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/85922549-c507-4cf8-9b7c-dad60d75d14c-whisker-backend-key-pair\") pod \"whisker-764bb4f486-6jgng\" (UID: \"85922549-c507-4cf8-9b7c-dad60d75d14c\") " pod="calico-system/whisker-764bb4f486-6jgng" Jul 10 00:47:51.662346 kubelet[1944]: I0710 00:47:51.661874 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/92f142e6-5a1f-4990-8f0f-7b715f748a50-config-volume\") pod \"coredns-7c65d6cfc9-5nrl8\" (UID: \"92f142e6-5a1f-4990-8f0f-7b715f748a50\") " pod="kube-system/coredns-7c65d6cfc9-5nrl8" Jul 10 00:47:51.725779 env[1202]: time="2025-07-10T00:47:51.724995851Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 10 00:47:51.865382 kubelet[1944]: E0710 00:47:51.865341 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:51.865993 env[1202]: time="2025-07-10T00:47:51.865953713Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-5nrl8,Uid:92f142e6-5a1f-4990-8f0f-7b715f748a50,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:51.872268 env[1202]: time="2025-07-10T00:47:51.872215459Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f4f84749-bc2qs,Uid:f6f00b3e-a850-4a67-9877-16e2b2fdf120,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:47:51.880900 env[1202]: time="2025-07-10T00:47:51.880869588Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f4f84749-ccnrs,Uid:2883d529-10fa-4514-a96f-6c1f5ac98c7c,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:47:51.886460 env[1202]: time="2025-07-10T00:47:51.886417760Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c6b46bdd-r7ps4,Uid:10193579-ce3e-4a12-b394-8f9d2869720e,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:51.890939 env[1202]: time="2025-07-10T00:47:51.890911548Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-67c56776df-9wrhd,Uid:a73e65fd-c9a6-4aca-80b1-99749f4de040,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:47:51.896820 env[1202]: time="2025-07-10T00:47:51.896784672Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-h48tl,Uid:b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:51.901029 kubelet[1944]: E0710 00:47:51.900995 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:51.902765 env[1202]: time="2025-07-10T00:47:51.902459482Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-j9s7v,Uid:5fdf3fd1-ad69-475d-821f-cc09b8131811,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:51.906388 env[1202]: time="2025-07-10T00:47:51.906357660Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-764bb4f486-6jgng,Uid:85922549-c507-4cf8-9b7c-dad60d75d14c,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:51.970795 env[1202]: time="2025-07-10T00:47:51.970730819Z" level=error msg="Failed to destroy network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:51.971696 env[1202]: time="2025-07-10T00:47:51.971668764Z" level=error msg="encountered an error cleaning up failed sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:51.971829 env[1202]: time="2025-07-10T00:47:51.971799039Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f4f84749-bc2qs,Uid:f6f00b3e-a850-4a67-9877-16e2b2fdf120,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:51.972482 kubelet[1944]: E0710 00:47:51.972132 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:51.972482 kubelet[1944]: E0710 00:47:51.972200 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6f4f84749-bc2qs" Jul 10 00:47:51.972482 kubelet[1944]: E0710 00:47:51.972221 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6f4f84749-bc2qs" Jul 10 00:47:51.972616 kubelet[1944]: E0710 00:47:51.972258 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6f4f84749-bc2qs_calico-apiserver(f6f00b3e-a850-4a67-9877-16e2b2fdf120)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6f4f84749-bc2qs_calico-apiserver(f6f00b3e-a850-4a67-9877-16e2b2fdf120)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6f4f84749-bc2qs" podUID="f6f00b3e-a850-4a67-9877-16e2b2fdf120" Jul 10 00:47:52.011780 env[1202]: time="2025-07-10T00:47:52.011109252Z" level=error msg="Failed to destroy network for sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.012241 env[1202]: time="2025-07-10T00:47:52.012213169Z" level=error msg="encountered an error cleaning up failed sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.012374 env[1202]: time="2025-07-10T00:47:52.012345448Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-5nrl8,Uid:92f142e6-5a1f-4990-8f0f-7b715f748a50,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.012997 kubelet[1944]: E0710 00:47:52.012640 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.012997 kubelet[1944]: E0710 00:47:52.012700 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-5nrl8" Jul 10 00:47:52.012997 kubelet[1944]: E0710 00:47:52.012746 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-5nrl8" Jul 10 00:47:52.013127 kubelet[1944]: E0710 00:47:52.012791 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-5nrl8_kube-system(92f142e6-5a1f-4990-8f0f-7b715f748a50)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-5nrl8_kube-system(92f142e6-5a1f-4990-8f0f-7b715f748a50)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-5nrl8" podUID="92f142e6-5a1f-4990-8f0f-7b715f748a50" Jul 10 00:47:52.030763 env[1202]: time="2025-07-10T00:47:52.030680370Z" level=error msg="Failed to destroy network for sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.031126 env[1202]: time="2025-07-10T00:47:52.031086334Z" level=error msg="encountered an error cleaning up failed sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.031178 env[1202]: time="2025-07-10T00:47:52.031139013Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c6b46bdd-r7ps4,Uid:10193579-ce3e-4a12-b394-8f9d2869720e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.031413 kubelet[1944]: E0710 00:47:52.031364 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.031488 kubelet[1944]: E0710 00:47:52.031431 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7c6b46bdd-r7ps4" Jul 10 00:47:52.031488 kubelet[1944]: E0710 00:47:52.031455 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7c6b46bdd-r7ps4" Jul 10 00:47:52.031556 kubelet[1944]: E0710 00:47:52.031500 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7c6b46bdd-r7ps4_calico-system(10193579-ce3e-4a12-b394-8f9d2869720e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7c6b46bdd-r7ps4_calico-system(10193579-ce3e-4a12-b394-8f9d2869720e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7c6b46bdd-r7ps4" podUID="10193579-ce3e-4a12-b394-8f9d2869720e" Jul 10 00:47:52.036156 env[1202]: time="2025-07-10T00:47:52.036101530Z" level=error msg="Failed to destroy network for sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.036765 env[1202]: time="2025-07-10T00:47:52.036737717Z" level=error msg="encountered an error cleaning up failed sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.036902 env[1202]: time="2025-07-10T00:47:52.036873413Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-764bb4f486-6jgng,Uid:85922549-c507-4cf8-9b7c-dad60d75d14c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.037168 kubelet[1944]: E0710 00:47:52.037128 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.037168 kubelet[1944]: E0710 00:47:52.037166 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-764bb4f486-6jgng" Jul 10 00:47:52.037266 kubelet[1944]: E0710 00:47:52.037182 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-764bb4f486-6jgng" Jul 10 00:47:52.037266 kubelet[1944]: E0710 00:47:52.037207 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-764bb4f486-6jgng_calico-system(85922549-c507-4cf8-9b7c-dad60d75d14c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-764bb4f486-6jgng_calico-system(85922549-c507-4cf8-9b7c-dad60d75d14c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-764bb4f486-6jgng" podUID="85922549-c507-4cf8-9b7c-dad60d75d14c" Jul 10 00:47:52.044873 env[1202]: time="2025-07-10T00:47:52.044805940Z" level=error msg="Failed to destroy network for sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.045383 env[1202]: time="2025-07-10T00:47:52.045336628Z" level=error msg="encountered an error cleaning up failed sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.045460 env[1202]: time="2025-07-10T00:47:52.045389208Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f4f84749-ccnrs,Uid:2883d529-10fa-4514-a96f-6c1f5ac98c7c,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.045627 kubelet[1944]: E0710 00:47:52.045592 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.045627 kubelet[1944]: E0710 00:47:52.045631 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6f4f84749-ccnrs" Jul 10 00:47:52.045802 kubelet[1944]: E0710 00:47:52.045646 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6f4f84749-ccnrs" Jul 10 00:47:52.045802 kubelet[1944]: E0710 00:47:52.045688 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6f4f84749-ccnrs_calico-apiserver(2883d529-10fa-4514-a96f-6c1f5ac98c7c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6f4f84749-ccnrs_calico-apiserver(2883d529-10fa-4514-a96f-6c1f5ac98c7c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6f4f84749-ccnrs" podUID="2883d529-10fa-4514-a96f-6c1f5ac98c7c" Jul 10 00:47:52.054846 env[1202]: time="2025-07-10T00:47:52.054800908Z" level=error msg="Failed to destroy network for sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.055114 env[1202]: time="2025-07-10T00:47:52.055079251Z" level=error msg="encountered an error cleaning up failed sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.055299 env[1202]: time="2025-07-10T00:47:52.055267516Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-67c56776df-9wrhd,Uid:a73e65fd-c9a6-4aca-80b1-99749f4de040,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.055628 kubelet[1944]: E0710 00:47:52.055582 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.055699 kubelet[1944]: E0710 00:47:52.055630 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-67c56776df-9wrhd" Jul 10 00:47:52.055699 kubelet[1944]: E0710 00:47:52.055647 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-67c56776df-9wrhd" Jul 10 00:47:52.055913 kubelet[1944]: E0710 00:47:52.055694 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-67c56776df-9wrhd_calico-apiserver(a73e65fd-c9a6-4aca-80b1-99749f4de040)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-67c56776df-9wrhd_calico-apiserver(a73e65fd-c9a6-4aca-80b1-99749f4de040)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-67c56776df-9wrhd" podUID="a73e65fd-c9a6-4aca-80b1-99749f4de040" Jul 10 00:47:52.058959 env[1202]: time="2025-07-10T00:47:52.058902616Z" level=error msg="Failed to destroy network for sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.059285 env[1202]: time="2025-07-10T00:47:52.059249909Z" level=error msg="encountered an error cleaning up failed sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.059324 env[1202]: time="2025-07-10T00:47:52.059306576Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-j9s7v,Uid:5fdf3fd1-ad69-475d-821f-cc09b8131811,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.059483 kubelet[1944]: E0710 00:47:52.059457 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.059554 kubelet[1944]: E0710 00:47:52.059488 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-j9s7v" Jul 10 00:47:52.059554 kubelet[1944]: E0710 00:47:52.059501 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-j9s7v" Jul 10 00:47:52.059554 kubelet[1944]: E0710 00:47:52.059544 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-j9s7v_kube-system(5fdf3fd1-ad69-475d-821f-cc09b8131811)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-j9s7v_kube-system(5fdf3fd1-ad69-475d-821f-cc09b8131811)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-j9s7v" podUID="5fdf3fd1-ad69-475d-821f-cc09b8131811" Jul 10 00:47:52.065864 env[1202]: time="2025-07-10T00:47:52.065821195Z" level=error msg="Failed to destroy network for sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.066141 env[1202]: time="2025-07-10T00:47:52.066101242Z" level=error msg="encountered an error cleaning up failed sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.066194 env[1202]: time="2025-07-10T00:47:52.066147499Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-h48tl,Uid:b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.066323 kubelet[1944]: E0710 00:47:52.066298 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.066373 kubelet[1944]: E0710 00:47:52.066327 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-h48tl" Jul 10 00:47:52.066373 kubelet[1944]: E0710 00:47:52.066341 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-h48tl" Jul 10 00:47:52.066373 kubelet[1944]: E0710 00:47:52.066367 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-h48tl_calico-system(b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-h48tl_calico-system(b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-h48tl" podUID="b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89" Jul 10 00:47:52.580091 systemd[1]: Created slice kubepods-besteffort-podd5ed6e84_883c_4226_9ad8_831f6e16569a.slice. Jul 10 00:47:52.582134 env[1202]: time="2025-07-10T00:47:52.582095064Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qlpnz,Uid:d5ed6e84-883c-4226-9ad8-831f6e16569a,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:52.640677 env[1202]: time="2025-07-10T00:47:52.640612227Z" level=error msg="Failed to destroy network for sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.641076 env[1202]: time="2025-07-10T00:47:52.641037658Z" level=error msg="encountered an error cleaning up failed sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.641112 env[1202]: time="2025-07-10T00:47:52.641089034Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qlpnz,Uid:d5ed6e84-883c-4226-9ad8-831f6e16569a,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.641332 kubelet[1944]: E0710 00:47:52.641295 1944 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.641401 kubelet[1944]: E0710 00:47:52.641352 1944 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-qlpnz" Jul 10 00:47:52.641401 kubelet[1944]: E0710 00:47:52.641371 1944 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-qlpnz" Jul 10 00:47:52.641460 kubelet[1944]: E0710 00:47:52.641413 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-qlpnz_calico-system(d5ed6e84-883c-4226-9ad8-831f6e16569a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-qlpnz_calico-system(d5ed6e84-883c-4226-9ad8-831f6e16569a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-qlpnz" podUID="d5ed6e84-883c-4226-9ad8-831f6e16569a" Jul 10 00:47:52.642629 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75-shm.mount: Deactivated successfully. Jul 10 00:47:52.726510 kubelet[1944]: I0710 00:47:52.726484 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:47:52.727159 env[1202]: time="2025-07-10T00:47:52.727118938Z" level=info msg="StopPodSandbox for \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\"" Jul 10 00:47:52.728586 kubelet[1944]: I0710 00:47:52.728548 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:47:52.729194 env[1202]: time="2025-07-10T00:47:52.729160470Z" level=info msg="StopPodSandbox for \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\"" Jul 10 00:47:52.730619 kubelet[1944]: I0710 00:47:52.730586 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:47:52.731097 env[1202]: time="2025-07-10T00:47:52.731065715Z" level=info msg="StopPodSandbox for \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\"" Jul 10 00:47:52.731925 kubelet[1944]: I0710 00:47:52.731892 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:47:52.732322 env[1202]: time="2025-07-10T00:47:52.732287604Z" level=info msg="StopPodSandbox for \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\"" Jul 10 00:47:52.733551 kubelet[1944]: I0710 00:47:52.733523 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:47:52.734435 env[1202]: time="2025-07-10T00:47:52.734401111Z" level=info msg="StopPodSandbox for \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\"" Jul 10 00:47:52.736203 kubelet[1944]: I0710 00:47:52.735972 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:47:52.736445 env[1202]: time="2025-07-10T00:47:52.736412917Z" level=info msg="StopPodSandbox for \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\"" Jul 10 00:47:52.737645 kubelet[1944]: I0710 00:47:52.737619 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:47:52.738399 env[1202]: time="2025-07-10T00:47:52.738326988Z" level=info msg="StopPodSandbox for \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\"" Jul 10 00:47:52.739121 kubelet[1944]: I0710 00:47:52.739096 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:47:52.739421 env[1202]: time="2025-07-10T00:47:52.739401941Z" level=info msg="StopPodSandbox for \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\"" Jul 10 00:47:52.747340 kubelet[1944]: I0710 00:47:52.746827 1944 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:47:52.747868 env[1202]: time="2025-07-10T00:47:52.747828949Z" level=info msg="StopPodSandbox for \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\"" Jul 10 00:47:52.774127 env[1202]: time="2025-07-10T00:47:52.774062953Z" level=error msg="StopPodSandbox for \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\" failed" error="failed to destroy network for sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.774541 kubelet[1944]: E0710 00:47:52.774477 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:47:52.774745 kubelet[1944]: E0710 00:47:52.774561 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721"} Jul 10 00:47:52.774745 kubelet[1944]: E0710 00:47:52.774666 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a73e65fd-c9a6-4aca-80b1-99749f4de040\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:52.774745 kubelet[1944]: E0710 00:47:52.774700 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a73e65fd-c9a6-4aca-80b1-99749f4de040\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-67c56776df-9wrhd" podUID="a73e65fd-c9a6-4aca-80b1-99749f4de040" Jul 10 00:47:52.785414 env[1202]: time="2025-07-10T00:47:52.785358028Z" level=error msg="StopPodSandbox for \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\" failed" error="failed to destroy network for sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.785599 kubelet[1944]: E0710 00:47:52.785560 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:47:52.785599 kubelet[1944]: E0710 00:47:52.785590 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5"} Jul 10 00:47:52.785678 kubelet[1944]: E0710 00:47:52.785613 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"85922549-c507-4cf8-9b7c-dad60d75d14c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:52.785678 kubelet[1944]: E0710 00:47:52.785631 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"85922549-c507-4cf8-9b7c-dad60d75d14c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-764bb4f486-6jgng" podUID="85922549-c507-4cf8-9b7c-dad60d75d14c" Jul 10 00:47:52.787907 env[1202]: time="2025-07-10T00:47:52.787848644Z" level=error msg="StopPodSandbox for \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\" failed" error="failed to destroy network for sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.788334 kubelet[1944]: E0710 00:47:52.788301 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:47:52.788334 kubelet[1944]: E0710 00:47:52.788330 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080"} Jul 10 00:47:52.788426 kubelet[1944]: E0710 00:47:52.788348 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"92f142e6-5a1f-4990-8f0f-7b715f748a50\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:52.788426 kubelet[1944]: E0710 00:47:52.788364 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"92f142e6-5a1f-4990-8f0f-7b715f748a50\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-5nrl8" podUID="92f142e6-5a1f-4990-8f0f-7b715f748a50" Jul 10 00:47:52.790554 env[1202]: time="2025-07-10T00:47:52.790485877Z" level=error msg="StopPodSandbox for \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\" failed" error="failed to destroy network for sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.790837 kubelet[1944]: E0710 00:47:52.790795 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:47:52.790837 kubelet[1944]: E0710 00:47:52.790836 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75"} Jul 10 00:47:52.790995 kubelet[1944]: E0710 00:47:52.790858 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d5ed6e84-883c-4226-9ad8-831f6e16569a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:52.790995 kubelet[1944]: E0710 00:47:52.790874 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d5ed6e84-883c-4226-9ad8-831f6e16569a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-qlpnz" podUID="d5ed6e84-883c-4226-9ad8-831f6e16569a" Jul 10 00:47:52.817483 env[1202]: time="2025-07-10T00:47:52.817421031Z" level=error msg="StopPodSandbox for \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\" failed" error="failed to destroy network for sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.818294 kubelet[1944]: E0710 00:47:52.818105 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:47:52.818294 kubelet[1944]: E0710 00:47:52.818186 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a"} Jul 10 00:47:52.818294 kubelet[1944]: E0710 00:47:52.818235 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"10193579-ce3e-4a12-b394-8f9d2869720e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:52.818294 kubelet[1944]: E0710 00:47:52.818256 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"10193579-ce3e-4a12-b394-8f9d2869720e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7c6b46bdd-r7ps4" podUID="10193579-ce3e-4a12-b394-8f9d2869720e" Jul 10 00:47:52.822899 env[1202]: time="2025-07-10T00:47:52.822838515Z" level=error msg="StopPodSandbox for \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\" failed" error="failed to destroy network for sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.823022 env[1202]: time="2025-07-10T00:47:52.822873461Z" level=error msg="StopPodSandbox for \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\" failed" error="failed to destroy network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.823378 kubelet[1944]: E0710 00:47:52.823173 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:47:52.823378 kubelet[1944]: E0710 00:47:52.823238 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2"} Jul 10 00:47:52.823378 kubelet[1944]: E0710 00:47:52.823216 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:47:52.823378 kubelet[1944]: E0710 00:47:52.823297 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f6f00b3e-a850-4a67-9877-16e2b2fdf120\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:52.823378 kubelet[1944]: E0710 00:47:52.823299 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806"} Jul 10 00:47:52.823759 kubelet[1944]: E0710 00:47:52.823333 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5fdf3fd1-ad69-475d-821f-cc09b8131811\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:52.823759 kubelet[1944]: E0710 00:47:52.823329 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f6f00b3e-a850-4a67-9877-16e2b2fdf120\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6f4f84749-bc2qs" podUID="f6f00b3e-a850-4a67-9877-16e2b2fdf120" Jul 10 00:47:52.823759 kubelet[1944]: E0710 00:47:52.823356 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5fdf3fd1-ad69-475d-821f-cc09b8131811\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-j9s7v" podUID="5fdf3fd1-ad69-475d-821f-cc09b8131811" Jul 10 00:47:52.827379 env[1202]: time="2025-07-10T00:47:52.827323264Z" level=error msg="StopPodSandbox for \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\" failed" error="failed to destroy network for sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.827585 kubelet[1944]: E0710 00:47:52.827537 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:47:52.827649 kubelet[1944]: E0710 00:47:52.827583 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab"} Jul 10 00:47:52.827649 kubelet[1944]: E0710 00:47:52.827618 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:52.827649 kubelet[1944]: E0710 00:47:52.827636 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-h48tl" podUID="b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89" Jul 10 00:47:52.835944 env[1202]: time="2025-07-10T00:47:52.835805134Z" level=error msg="StopPodSandbox for \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\" failed" error="failed to destroy network for sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:52.836080 kubelet[1944]: E0710 00:47:52.835958 1944 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:47:52.836080 kubelet[1944]: E0710 00:47:52.835992 1944 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1"} Jul 10 00:47:52.836080 kubelet[1944]: E0710 00:47:52.836014 1944 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2883d529-10fa-4514-a96f-6c1f5ac98c7c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:52.836080 kubelet[1944]: E0710 00:47:52.836031 1944 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2883d529-10fa-4514-a96f-6c1f5ac98c7c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6f4f84749-ccnrs" podUID="2883d529-10fa-4514-a96f-6c1f5ac98c7c" Jul 10 00:47:54.171270 kubelet[1944]: I0710 00:47:54.171219 1944 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:47:54.171830 kubelet[1944]: E0710 00:47:54.171629 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:54.193000 audit[3197]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:54.193000 audit[3197]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff1e7cbf90 a2=0 a3=7fff1e7cbf7c items=0 ppid=2051 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:54.193000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:54.201000 audit[3197]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:54.201000 audit[3197]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff1e7cbf90 a2=0 a3=7fff1e7cbf7c items=0 ppid=2051 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:54.201000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:54.750226 kubelet[1944]: E0710 00:47:54.750194 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:00.602954 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2443259375.mount: Deactivated successfully. Jul 10 00:48:00.615085 systemd[1]: Started sshd@7-10.0.0.142:22-10.0.0.1:53394.service. Jul 10 00:48:00.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.142:22-10.0.0.1:53394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:00.616394 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 10 00:48:00.616454 kernel: audit: type=1130 audit(1752108480.614:997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.142:22-10.0.0.1:53394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:01.776581 env[1202]: time="2025-07-10T00:48:01.776521200Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:01.778972 env[1202]: time="2025-07-10T00:48:01.778930016Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:01.780519 env[1202]: time="2025-07-10T00:48:01.780493854Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:01.781915 env[1202]: time="2025-07-10T00:48:01.781880840Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:01.782139 env[1202]: time="2025-07-10T00:48:01.782103158Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 10 00:48:01.787000 audit[3200]: USER_ACCT pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.791930 env[1202]: time="2025-07-10T00:48:01.789440865Z" level=info msg="CreateContainer within sandbox \"3550aaccaf62590a1adfc072fcca21e42ccb1fd28a238a8b1f6bc0fa98357e31\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 10 00:48:01.789578 sshd[3200]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:01.792199 sshd[3200]: Accepted publickey for core from 10.0.0.1 port 53394 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:01.788000 audit[3200]: CRED_ACQ pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.797223 systemd-logind[1190]: New session 8 of user core. Jul 10 00:48:01.798168 systemd[1]: Started session-8.scope. Jul 10 00:48:01.799505 kernel: audit: type=1101 audit(1752108481.787:998): pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.799592 kernel: audit: type=1103 audit(1752108481.788:999): pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.799619 kernel: audit: type=1006 audit(1752108481.788:1000): pid=3200 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 10 00:48:01.788000 audit[3200]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5a1c5310 a2=3 a3=0 items=0 ppid=1 pid=3200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:01.806277 kernel: audit: type=1300 audit(1752108481.788:1000): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd5a1c5310 a2=3 a3=0 items=0 ppid=1 pid=3200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:01.788000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:01.808356 kernel: audit: type=1327 audit(1752108481.788:1000): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:01.808399 kernel: audit: type=1105 audit(1752108481.805:1001): pid=3200 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.805000 audit[3200]: USER_START pid=3200 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.807000 audit[3204]: CRED_ACQ pid=3204 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.813741 env[1202]: time="2025-07-10T00:48:01.813697180Z" level=info msg="CreateContainer within sandbox \"3550aaccaf62590a1adfc072fcca21e42ccb1fd28a238a8b1f6bc0fa98357e31\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"d7d10b4dfb7aa247dff0b4da8ad620a908ed337b64550d8398104d7a791fd4b4\"" Jul 10 00:48:01.814201 env[1202]: time="2025-07-10T00:48:01.814182612Z" level=info msg="StartContainer for \"d7d10b4dfb7aa247dff0b4da8ad620a908ed337b64550d8398104d7a791fd4b4\"" Jul 10 00:48:01.816838 kernel: audit: type=1103 audit(1752108481.807:1002): pid=3204 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.828651 systemd[1]: Started cri-containerd-d7d10b4dfb7aa247dff0b4da8ad620a908ed337b64550d8398104d7a791fd4b4.scope. Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit[3212]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f76c4098cc8 items=0 ppid=2446 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:01.851331 kernel: audit: type=1400 audit(1752108481.843:1003): avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.851391 kernel: audit: type=1300 audit(1752108481.843:1003): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f76c4098cc8 items=0 ppid=2446 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:01.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643130623464666237616132343764666630623464613861643632 Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.843000 audit: BPF prog-id=136 op=LOAD Jul 10 00:48:01.843000 audit[3212]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000340098 items=0 ppid=2446 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:01.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643130623464666237616132343764666630623464613861643632 Jul 10 00:48:01.846000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.846000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.846000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.846000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.846000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.846000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.846000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.846000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.846000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.846000 audit: BPF prog-id=137 op=LOAD Jul 10 00:48:01.846000 audit[3212]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0003400e8 items=0 ppid=2446 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:01.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643130623464666237616132343764666630623464613861643632 Jul 10 00:48:01.850000 audit: BPF prog-id=137 op=UNLOAD Jul 10 00:48:01.850000 audit: BPF prog-id=136 op=UNLOAD Jul 10 00:48:01.850000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.850000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.850000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.850000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.850000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.850000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.850000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.850000 audit[3212]: AVC avc: denied { perfmon } for pid=3212 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.850000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.850000 audit[3212]: AVC avc: denied { bpf } for pid=3212 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:01.850000 audit: BPF prog-id=138 op=LOAD Jul 10 00:48:01.850000 audit[3212]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000340178 items=0 ppid=2446 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:01.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437643130623464666237616132343764666630623464613861643632 Jul 10 00:48:01.867096 env[1202]: time="2025-07-10T00:48:01.867042823Z" level=info msg="StartContainer for \"d7d10b4dfb7aa247dff0b4da8ad620a908ed337b64550d8398104d7a791fd4b4\" returns successfully" Jul 10 00:48:01.939913 sshd[3200]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:01.940000 audit[3200]: USER_END pid=3200 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.940000 audit[3200]: CRED_DISP pid=3200 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.942658 systemd[1]: sshd@7-10.0.0.142:22-10.0.0.1:53394.service: Deactivated successfully. Jul 10 00:48:01.942000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.142:22-10.0.0.1:53394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:01.943383 systemd[1]: session-8.scope: Deactivated successfully. Jul 10 00:48:01.943667 systemd-logind[1190]: Session 8 logged out. Waiting for processes to exit. Jul 10 00:48:01.944377 systemd-logind[1190]: Removed session 8. Jul 10 00:48:01.953807 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 10 00:48:01.953855 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 10 00:48:02.043573 env[1202]: time="2025-07-10T00:48:02.043413619Z" level=info msg="StopPodSandbox for \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\"" Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.100 [INFO][3286] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.100 [INFO][3286] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" iface="eth0" netns="/var/run/netns/cni-e78af796-d852-65b3-89e6-ff7ae539dfdf" Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.100 [INFO][3286] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" iface="eth0" netns="/var/run/netns/cni-e78af796-d852-65b3-89e6-ff7ae539dfdf" Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.100 [INFO][3286] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" iface="eth0" netns="/var/run/netns/cni-e78af796-d852-65b3-89e6-ff7ae539dfdf" Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.100 [INFO][3286] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.100 [INFO][3286] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.148 [INFO][3297] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" HandleID="k8s-pod-network.1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Workload="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.148 [INFO][3297] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.149 [INFO][3297] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.156 [WARNING][3297] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" HandleID="k8s-pod-network.1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Workload="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.156 [INFO][3297] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" HandleID="k8s-pod-network.1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Workload="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.157 [INFO][3297] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:02.160828 env[1202]: 2025-07-10 00:48:02.159 [INFO][3286] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:02.161343 env[1202]: time="2025-07-10T00:48:02.160959931Z" level=info msg="TearDown network for sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\" successfully" Jul 10 00:48:02.161343 env[1202]: time="2025-07-10T00:48:02.161001811Z" level=info msg="StopPodSandbox for \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\" returns successfully" Jul 10 00:48:02.221453 kubelet[1944]: I0710 00:48:02.221407 1944 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/85922549-c507-4cf8-9b7c-dad60d75d14c-whisker-ca-bundle\") pod \"85922549-c507-4cf8-9b7c-dad60d75d14c\" (UID: \"85922549-c507-4cf8-9b7c-dad60d75d14c\") " Jul 10 00:48:02.221453 kubelet[1944]: I0710 00:48:02.221450 1944 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-n885b\" (UniqueName: \"kubernetes.io/projected/85922549-c507-4cf8-9b7c-dad60d75d14c-kube-api-access-n885b\") pod \"85922549-c507-4cf8-9b7c-dad60d75d14c\" (UID: \"85922549-c507-4cf8-9b7c-dad60d75d14c\") " Jul 10 00:48:02.221878 kubelet[1944]: I0710 00:48:02.221484 1944 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/85922549-c507-4cf8-9b7c-dad60d75d14c-whisker-backend-key-pair\") pod \"85922549-c507-4cf8-9b7c-dad60d75d14c\" (UID: \"85922549-c507-4cf8-9b7c-dad60d75d14c\") " Jul 10 00:48:02.221878 kubelet[1944]: I0710 00:48:02.221786 1944 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/85922549-c507-4cf8-9b7c-dad60d75d14c-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "85922549-c507-4cf8-9b7c-dad60d75d14c" (UID: "85922549-c507-4cf8-9b7c-dad60d75d14c"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 10 00:48:02.224932 kubelet[1944]: I0710 00:48:02.224902 1944 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/85922549-c507-4cf8-9b7c-dad60d75d14c-kube-api-access-n885b" (OuterVolumeSpecName: "kube-api-access-n885b") pod "85922549-c507-4cf8-9b7c-dad60d75d14c" (UID: "85922549-c507-4cf8-9b7c-dad60d75d14c"). InnerVolumeSpecName "kube-api-access-n885b". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 10 00:48:02.225378 kubelet[1944]: I0710 00:48:02.225346 1944 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/85922549-c507-4cf8-9b7c-dad60d75d14c-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "85922549-c507-4cf8-9b7c-dad60d75d14c" (UID: "85922549-c507-4cf8-9b7c-dad60d75d14c"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 10 00:48:02.322605 kubelet[1944]: I0710 00:48:02.322495 1944 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/85922549-c507-4cf8-9b7c-dad60d75d14c-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 10 00:48:02.322605 kubelet[1944]: I0710 00:48:02.322525 1944 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-n885b\" (UniqueName: \"kubernetes.io/projected/85922549-c507-4cf8-9b7c-dad60d75d14c-kube-api-access-n885b\") on node \"localhost\" DevicePath \"\"" Jul 10 00:48:02.322605 kubelet[1944]: I0710 00:48:02.322533 1944 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/85922549-c507-4cf8-9b7c-dad60d75d14c-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 10 00:48:02.772740 systemd[1]: Removed slice kubepods-besteffort-pod85922549_c507_4cf8_9b7c_dad60d75d14c.slice. Jul 10 00:48:02.787980 systemd[1]: run-netns-cni\x2de78af796\x2dd852\x2d65b3\x2d89e6\x2dff7ae539dfdf.mount: Deactivated successfully. Jul 10 00:48:02.788111 systemd[1]: var-lib-kubelet-pods-85922549\x2dc507\x2d4cf8\x2d9b7c\x2ddad60d75d14c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dn885b.mount: Deactivated successfully. Jul 10 00:48:02.788203 systemd[1]: var-lib-kubelet-pods-85922549\x2dc507\x2d4cf8\x2d9b7c\x2ddad60d75d14c-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 10 00:48:02.809632 kubelet[1944]: I0710 00:48:02.809567 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-6cz5r" podStartSLOduration=1.862170705 podStartE2EDuration="20.809547148s" podCreationTimestamp="2025-07-10 00:47:42 +0000 UTC" firstStartedPulling="2025-07-10 00:47:42.835301816 +0000 UTC m=+19.342444371" lastFinishedPulling="2025-07-10 00:48:01.782678259 +0000 UTC m=+38.289820814" observedRunningTime="2025-07-10 00:48:02.803931227 +0000 UTC m=+39.311073802" watchObservedRunningTime="2025-07-10 00:48:02.809547148 +0000 UTC m=+39.316689693" Jul 10 00:48:02.815646 systemd[1]: Created slice kubepods-besteffort-pod82865899_ee9c_4319_bfc8_0c7ba8958a50.slice. Jul 10 00:48:02.826753 kubelet[1944]: I0710 00:48:02.826697 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-q56kz\" (UniqueName: \"kubernetes.io/projected/82865899-ee9c-4319-bfc8-0c7ba8958a50-kube-api-access-q56kz\") pod \"whisker-699d7d46d6-hkhfh\" (UID: \"82865899-ee9c-4319-bfc8-0c7ba8958a50\") " pod="calico-system/whisker-699d7d46d6-hkhfh" Jul 10 00:48:02.826753 kubelet[1944]: I0710 00:48:02.826761 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/82865899-ee9c-4319-bfc8-0c7ba8958a50-whisker-ca-bundle\") pod \"whisker-699d7d46d6-hkhfh\" (UID: \"82865899-ee9c-4319-bfc8-0c7ba8958a50\") " pod="calico-system/whisker-699d7d46d6-hkhfh" Jul 10 00:48:02.827002 kubelet[1944]: I0710 00:48:02.826789 1944 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/82865899-ee9c-4319-bfc8-0c7ba8958a50-whisker-backend-key-pair\") pod \"whisker-699d7d46d6-hkhfh\" (UID: \"82865899-ee9c-4319-bfc8-0c7ba8958a50\") " pod="calico-system/whisker-699d7d46d6-hkhfh" Jul 10 00:48:03.119814 env[1202]: time="2025-07-10T00:48:03.119685058Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-699d7d46d6-hkhfh,Uid:82865899-ee9c-4319-bfc8-0c7ba8958a50,Namespace:calico-system,Attempt:0,}" Jul 10 00:48:03.219548 systemd-networkd[1019]: calid1c8ba957a0: Link UP Jul 10 00:48:03.220735 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:48:03.220784 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid1c8ba957a0: link becomes ready Jul 10 00:48:03.221951 systemd-networkd[1019]: calid1c8ba957a0: Gained carrier Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.151 [INFO][3347] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.162 [INFO][3347] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--699d7d46d6--hkhfh-eth0 whisker-699d7d46d6- calico-system 82865899-ee9c-4319-bfc8-0c7ba8958a50 1010 0 2025-07-10 00:48:02 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:699d7d46d6 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-699d7d46d6-hkhfh eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calid1c8ba957a0 [] [] }} ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Namespace="calico-system" Pod="whisker-699d7d46d6-hkhfh" WorkloadEndpoint="localhost-k8s-whisker--699d7d46d6--hkhfh-" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.162 [INFO][3347] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Namespace="calico-system" Pod="whisker-699d7d46d6-hkhfh" WorkloadEndpoint="localhost-k8s-whisker--699d7d46d6--hkhfh-eth0" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.185 [INFO][3361] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" HandleID="k8s-pod-network.7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Workload="localhost-k8s-whisker--699d7d46d6--hkhfh-eth0" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.185 [INFO][3361] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" HandleID="k8s-pod-network.7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Workload="localhost-k8s-whisker--699d7d46d6--hkhfh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004e7d0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-699d7d46d6-hkhfh", "timestamp":"2025-07-10 00:48:03.185062007 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.185 [INFO][3361] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.185 [INFO][3361] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.185 [INFO][3361] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.191 [INFO][3361] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" host="localhost" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.195 [INFO][3361] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.198 [INFO][3361] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.200 [INFO][3361] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.201 [INFO][3361] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.201 [INFO][3361] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" host="localhost" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.202 [INFO][3361] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85 Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.205 [INFO][3361] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" host="localhost" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.209 [INFO][3361] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" host="localhost" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.210 [INFO][3361] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" host="localhost" Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.210 [INFO][3361] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:03.235395 env[1202]: 2025-07-10 00:48:03.210 [INFO][3361] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" HandleID="k8s-pod-network.7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Workload="localhost-k8s-whisker--699d7d46d6--hkhfh-eth0" Jul 10 00:48:03.236190 env[1202]: 2025-07-10 00:48:03.212 [INFO][3347] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Namespace="calico-system" Pod="whisker-699d7d46d6-hkhfh" WorkloadEndpoint="localhost-k8s-whisker--699d7d46d6--hkhfh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--699d7d46d6--hkhfh-eth0", GenerateName:"whisker-699d7d46d6-", Namespace:"calico-system", SelfLink:"", UID:"82865899-ee9c-4319-bfc8-0c7ba8958a50", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 48, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"699d7d46d6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-699d7d46d6-hkhfh", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calid1c8ba957a0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:03.236190 env[1202]: 2025-07-10 00:48:03.212 [INFO][3347] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Namespace="calico-system" Pod="whisker-699d7d46d6-hkhfh" WorkloadEndpoint="localhost-k8s-whisker--699d7d46d6--hkhfh-eth0" Jul 10 00:48:03.236190 env[1202]: 2025-07-10 00:48:03.212 [INFO][3347] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid1c8ba957a0 ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Namespace="calico-system" Pod="whisker-699d7d46d6-hkhfh" WorkloadEndpoint="localhost-k8s-whisker--699d7d46d6--hkhfh-eth0" Jul 10 00:48:03.236190 env[1202]: 2025-07-10 00:48:03.222 [INFO][3347] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Namespace="calico-system" Pod="whisker-699d7d46d6-hkhfh" WorkloadEndpoint="localhost-k8s-whisker--699d7d46d6--hkhfh-eth0" Jul 10 00:48:03.236190 env[1202]: 2025-07-10 00:48:03.222 [INFO][3347] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Namespace="calico-system" Pod="whisker-699d7d46d6-hkhfh" WorkloadEndpoint="localhost-k8s-whisker--699d7d46d6--hkhfh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--699d7d46d6--hkhfh-eth0", GenerateName:"whisker-699d7d46d6-", Namespace:"calico-system", SelfLink:"", UID:"82865899-ee9c-4319-bfc8-0c7ba8958a50", ResourceVersion:"1010", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 48, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"699d7d46d6", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85", Pod:"whisker-699d7d46d6-hkhfh", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calid1c8ba957a0", MAC:"12:a3:ce:bd:5f:72", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:03.236190 env[1202]: 2025-07-10 00:48:03.233 [INFO][3347] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85" Namespace="calico-system" Pod="whisker-699d7d46d6-hkhfh" WorkloadEndpoint="localhost-k8s-whisker--699d7d46d6--hkhfh-eth0" Jul 10 00:48:03.244132 env[1202]: time="2025-07-10T00:48:03.244058471Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:48:03.244132 env[1202]: time="2025-07-10T00:48:03.244101221Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:48:03.244132 env[1202]: time="2025-07-10T00:48:03.244115608Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:48:03.244412 env[1202]: time="2025-07-10T00:48:03.244360599Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85 pid=3383 runtime=io.containerd.runc.v2 Jul 10 00:48:03.255145 systemd[1]: Started cri-containerd-7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85.scope. Jul 10 00:48:03.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit: BPF prog-id=139 op=LOAD Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3383 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761663230646636623563653666626337373539326334373435393763 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3383 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761663230646636623563653666626337373539326334373435393763 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit: BPF prog-id=140 op=LOAD Jul 10 00:48:03.277000 audit[3394]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0001e9a30 items=0 ppid=3383 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761663230646636623563653666626337373539326334373435393763 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.277000 audit: BPF prog-id=141 op=LOAD Jul 10 00:48:03.277000 audit[3394]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0001e9a78 items=0 ppid=3383 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761663230646636623563653666626337373539326334373435393763 Jul 10 00:48:03.278000 audit: BPF prog-id=141 op=UNLOAD Jul 10 00:48:03.278000 audit: BPF prog-id=140 op=UNLOAD Jul 10 00:48:03.278000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.278000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.278000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.278000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.278000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.278000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.278000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.278000 audit[3394]: AVC avc: denied { perfmon } for pid=3394 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.278000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.278000 audit[3394]: AVC avc: denied { bpf } for pid=3394 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.278000 audit: BPF prog-id=142 op=LOAD Jul 10 00:48:03.278000 audit[3394]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0001e9e88 items=0 ppid=3383 pid=3394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.278000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761663230646636623563653666626337373539326334373435393763 Jul 10 00:48:03.283000 audit[3442]: AVC avc: denied { write } for pid=3442 comm="tee" name="fd" dev="proc" ino=25631 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:48:03.283000 audit[3442]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef1d967e5 a2=241 a3=1b6 items=1 ppid=3416 pid=3442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.283000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 10 00:48:03.283000 audit: PATH item=0 name="/dev/fd/63" inode=24184 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:48:03.283000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:48:03.300000 audit[3455]: AVC avc: denied { write } for pid=3455 comm="tee" name="fd" dev="proc" ino=25215 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:48:03.300000 audit[3455]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff407697f5 a2=241 a3=1b6 items=1 ppid=3421 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.300000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 10 00:48:03.300000 audit: PATH item=0 name="/dev/fd/63" inode=24200 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:48:03.300000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:48:03.309000 audit[3479]: AVC avc: denied { write } for pid=3479 comm="tee" name="fd" dev="proc" ino=25637 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:48:03.309000 audit[3479]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc4f70e7f6 a2=241 a3=1b6 items=1 ppid=3420 pid=3479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.309000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 10 00:48:03.309000 audit: PATH item=0 name="/dev/fd/63" inode=24205 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:48:03.309000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:48:03.311371 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:48:03.311000 audit[3482]: AVC avc: denied { write } for pid=3482 comm="tee" name="fd" dev="proc" ino=25641 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:48:03.311000 audit[3482]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe289977f5 a2=241 a3=1b6 items=1 ppid=3453 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.311000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 10 00:48:03.311000 audit: PATH item=0 name="/dev/fd/63" inode=25217 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:48:03.311000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:48:03.313000 audit[3485]: AVC avc: denied { write } for pid=3485 comm="tee" name="fd" dev="proc" ino=25645 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:48:03.313000 audit[3485]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc95c3b7e6 a2=241 a3=1b6 items=1 ppid=3417 pid=3485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.313000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 10 00:48:03.313000 audit: PATH item=0 name="/dev/fd/63" inode=25218 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:48:03.313000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:48:03.316000 audit[3489]: AVC avc: denied { write } for pid=3489 comm="tee" name="fd" dev="proc" ino=25652 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:48:03.316000 audit[3489]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffd0fb77f7 a2=241 a3=1b6 items=1 ppid=3426 pid=3489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.316000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 10 00:48:03.316000 audit: PATH item=0 name="/dev/fd/63" inode=25649 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:48:03.316000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:48:03.346811 env[1202]: time="2025-07-10T00:48:03.346771266Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-699d7d46d6-hkhfh,Uid:82865899-ee9c-4319-bfc8-0c7ba8958a50,Namespace:calico-system,Attempt:0,} returns sandbox id \"7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85\"" Jul 10 00:48:03.348492 env[1202]: time="2025-07-10T00:48:03.348463905Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 10 00:48:03.394000 audit[3508]: AVC avc: denied { write } for pid=3508 comm="tee" name="fd" dev="proc" ino=25675 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:48:03.394000 audit[3508]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc1e9597f5 a2=241 a3=1b6 items=1 ppid=3413 pid=3508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.394000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 10 00:48:03.394000 audit: PATH item=0 name="/dev/fd/63" inode=25667 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:48:03.394000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.577370 env[1202]: time="2025-07-10T00:48:03.577320128Z" level=info msg="StopPodSandbox for \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\"" Jul 10 00:48:03.578115 env[1202]: time="2025-07-10T00:48:03.577559027Z" level=info msg="StopPodSandbox for \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\"" Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit: BPF prog-id=143 op=LOAD Jul 10 00:48:03.575000 audit[3545]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4a18640 a2=98 a3=1fffffffffffffff items=0 ppid=3462 pid=3545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.575000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:48:03.575000 audit: BPF prog-id=143 op=UNLOAD Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit: BPF prog-id=144 op=LOAD Jul 10 00:48:03.575000 audit[3545]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4a18520 a2=94 a3=3 items=0 ppid=3462 pid=3545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.575000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:48:03.575000 audit: BPF prog-id=144 op=UNLOAD Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { bpf } for pid=3545 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit: BPF prog-id=145 op=LOAD Jul 10 00:48:03.575000 audit[3545]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4a18560 a2=94 a3=7fffe4a18740 items=0 ppid=3462 pid=3545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.575000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:48:03.575000 audit: BPF prog-id=145 op=UNLOAD Jul 10 00:48:03.575000 audit[3545]: AVC avc: denied { perfmon } for pid=3545 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.575000 audit[3545]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7fffe4a18630 a2=50 a3=a000000085 items=0 ppid=3462 pid=3545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.575000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit: BPF prog-id=146 op=LOAD Jul 10 00:48:03.576000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdb1ab9c50 a2=98 a3=3 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.576000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.576000 audit: BPF prog-id=146 op=UNLOAD Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.576000 audit: BPF prog-id=147 op=LOAD Jul 10 00:48:03.576000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdb1ab9a40 a2=94 a3=54428f items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.576000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.580333 kubelet[1944]: I0710 00:48:03.578478 1944 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="85922549-c507-4cf8-9b7c-dad60d75d14c" path="/var/lib/kubelet/pods/85922549-c507-4cf8-9b7c-dad60d75d14c/volumes" Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.638 [INFO][3565] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.638 [INFO][3565] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" iface="eth0" netns="/var/run/netns/cni-10f41aa4-2211-e5b0-2fcc-3179ebfcf552" Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.638 [INFO][3565] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" iface="eth0" netns="/var/run/netns/cni-10f41aa4-2211-e5b0-2fcc-3179ebfcf552" Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.641 [INFO][3565] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" iface="eth0" netns="/var/run/netns/cni-10f41aa4-2211-e5b0-2fcc-3179ebfcf552" Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.641 [INFO][3565] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.641 [INFO][3565] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.670 [INFO][3587] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.670 [INFO][3587] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.670 [INFO][3587] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.677 [WARNING][3587] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.677 [INFO][3587] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.678 [INFO][3587] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:03.685214 env[1202]: 2025-07-10 00:48:03.680 [INFO][3565] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:03.685214 env[1202]: time="2025-07-10T00:48:03.684165084Z" level=info msg="TearDown network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\" successfully" Jul 10 00:48:03.685214 env[1202]: time="2025-07-10T00:48:03.684190011Z" level=info msg="StopPodSandbox for \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\" returns successfully" Jul 10 00:48:03.685214 env[1202]: time="2025-07-10T00:48:03.684590213Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f4f84749-bc2qs,Uid:f6f00b3e-a850-4a67-9877-16e2b2fdf120,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:48:03.700000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.700000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.700000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.700000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.700000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.700000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.700000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.700000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.700000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.700000 audit: BPF prog-id=149 op=LOAD Jul 10 00:48:03.700000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdb1ab9930 a2=94 a3=1 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.700000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.700000 audit: BPF prog-id=149 op=UNLOAD Jul 10 00:48:03.700000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.700000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffdb1ab9a00 a2=50 a3=7ffdb1ab9ae0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.700000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.638 [INFO][3570] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.639 [INFO][3570] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" iface="eth0" netns="/var/run/netns/cni-359df185-0686-52e6-fae1-82de304ccb22" Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.639 [INFO][3570] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" iface="eth0" netns="/var/run/netns/cni-359df185-0686-52e6-fae1-82de304ccb22" Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.640 [INFO][3570] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" iface="eth0" netns="/var/run/netns/cni-359df185-0686-52e6-fae1-82de304ccb22" Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.640 [INFO][3570] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.640 [INFO][3570] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.692 [INFO][3585] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" HandleID="k8s-pod-network.99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.692 [INFO][3585] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.693 [INFO][3585] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.698 [WARNING][3585] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" HandleID="k8s-pod-network.99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.698 [INFO][3585] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" HandleID="k8s-pod-network.99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.701 [INFO][3585] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:03.710430 env[1202]: 2025-07-10 00:48:03.708 [INFO][3570] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb1ab9940 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb1ab9970 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb1ab9880 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb1ab9990 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb1ab9970 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb1ab9960 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb1ab9990 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb1ab9970 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb1ab9990 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdb1ab9960 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdb1ab99d0 a2=28 a3=0 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdb1ab9780 a2=50 a3=1 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit: BPF prog-id=150 op=LOAD Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdb1ab9780 a2=94 a3=5 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit: BPF prog-id=150 op=UNLOAD Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdb1ab9830 a2=50 a3=1 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffdb1ab9950 a2=4 a3=38 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.710000 audit[3546]: AVC avc: denied { confidentiality } for pid=3546 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:48:03.710000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdb1ab99a0 a2=94 a3=6 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.710000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { confidentiality } for pid=3546 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:48:03.711000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdb1ab9150 a2=94 a3=88 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.711000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { perfmon } for pid=3546 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { bpf } for pid=3546 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.711000 audit[3546]: AVC avc: denied { confidentiality } for pid=3546 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:48:03.711000 audit[3546]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdb1ab9150 a2=94 a3=88 items=0 ppid=3462 pid=3546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.711000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:48:03.714068 env[1202]: time="2025-07-10T00:48:03.710560778Z" level=info msg="TearDown network for sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\" successfully" Jul 10 00:48:03.714068 env[1202]: time="2025-07-10T00:48:03.710586586Z" level=info msg="StopPodSandbox for \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\" returns successfully" Jul 10 00:48:03.714068 env[1202]: time="2025-07-10T00:48:03.711628965Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-j9s7v,Uid:5fdf3fd1-ad69-475d-821f-cc09b8131811,Namespace:kube-system,Attempt:1,}" Jul 10 00:48:03.714146 kubelet[1944]: E0710 00:48:03.710936 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:03.719000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.719000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.719000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.719000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.719000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.719000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.719000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.719000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.719000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.719000 audit: BPF prog-id=151 op=LOAD Jul 10 00:48:03.719000 audit[3617]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4932080 a2=98 a3=1999999999999999 items=0 ppid=3462 pid=3617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.719000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:48:03.720000 audit: BPF prog-id=151 op=UNLOAD Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit: BPF prog-id=152 op=LOAD Jul 10 00:48:03.720000 audit[3617]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4931f60 a2=94 a3=ffff items=0 ppid=3462 pid=3617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.720000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:48:03.720000 audit: BPF prog-id=152 op=UNLOAD Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { perfmon } for pid=3617 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit[3617]: AVC avc: denied { bpf } for pid=3617 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.720000 audit: BPF prog-id=153 op=LOAD Jul 10 00:48:03.720000 audit[3617]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffe4931fa0 a2=94 a3=7fffe4932180 items=0 ppid=3462 pid=3617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.720000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:48:03.720000 audit: BPF prog-id=153 op=UNLOAD Jul 10 00:48:03.789951 systemd[1]: run-netns-cni\x2d359df185\x2d0686\x2d52e6\x2dfae1\x2d82de304ccb22.mount: Deactivated successfully. Jul 10 00:48:03.790038 systemd[1]: run-netns-cni\x2d10f41aa4\x2d2211\x2de5b0\x2d2fcc\x2d3179ebfcf552.mount: Deactivated successfully. Jul 10 00:48:03.794617 systemd-networkd[1019]: vxlan.calico: Link UP Jul 10 00:48:03.794629 systemd-networkd[1019]: vxlan.calico: Gained carrier Jul 10 00:48:03.836000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.836000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.836000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.836000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.836000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.836000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.836000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.836000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.836000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.836000 audit: BPF prog-id=154 op=LOAD Jul 10 00:48:03.836000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff34c30850 a2=98 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.836000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.836000 audit: BPF prog-id=154 op=UNLOAD Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit: BPF prog-id=155 op=LOAD Jul 10 00:48:03.837000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff34c30660 a2=94 a3=54428f items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.837000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.837000 audit: BPF prog-id=155 op=UNLOAD Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit: BPF prog-id=156 op=LOAD Jul 10 00:48:03.837000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff34c30690 a2=94 a3=2 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.837000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.837000 audit: BPF prog-id=156 op=UNLOAD Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff34c30560 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.837000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff34c30590 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.837000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff34c304a0 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.837000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff34c305b0 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.837000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff34c30590 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.837000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff34c30580 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.837000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff34c305b0 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.837000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.837000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.837000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff34c30590 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.837000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff34c305b0 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.838000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff34c30580 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.838000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff34c305f0 a2=28 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.838000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit: BPF prog-id=157 op=LOAD Jul 10 00:48:03.838000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff34c30460 a2=94 a3=0 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.838000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.838000 audit: BPF prog-id=157 op=UNLOAD Jul 10 00:48:03.838000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.838000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff34c30450 a2=50 a3=2800 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.838000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff34c30450 a2=50 a3=2800 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.839000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit: BPF prog-id=158 op=LOAD Jul 10 00:48:03.839000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff34c2fc70 a2=94 a3=2 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.839000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.839000 audit: BPF prog-id=158 op=UNLOAD Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.839000 audit: BPF prog-id=159 op=LOAD Jul 10 00:48:03.839000 audit[3697]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff34c2fd70 a2=94 a3=30 items=0 ppid=3462 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.839000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:48:03.843000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.843000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.843000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.843000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.843000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.843000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.843000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.843000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.843000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.843000 audit: BPF prog-id=160 op=LOAD Jul 10 00:48:03.843000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe71016fc0 a2=98 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.843000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.844000 audit: BPF prog-id=160 op=UNLOAD Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit: BPF prog-id=161 op=LOAD Jul 10 00:48:03.844000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe71016db0 a2=94 a3=54428f items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.844000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.844000 audit: BPF prog-id=161 op=UNLOAD Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.844000 audit: BPF prog-id=162 op=LOAD Jul 10 00:48:03.844000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe71016de0 a2=94 a3=2 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.844000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.844000 audit: BPF prog-id=162 op=UNLOAD Jul 10 00:48:03.948000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.948000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.948000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.948000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.948000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.948000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.948000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.948000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.948000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.948000 audit: BPF prog-id=163 op=LOAD Jul 10 00:48:03.948000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe71016ca0 a2=94 a3=1 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.948000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.948000 audit: BPF prog-id=163 op=UNLOAD Jul 10 00:48:03.948000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.948000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe71016d70 a2=50 a3=7ffe71016e50 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.948000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe71016cb0 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe71016ce0 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe71016bf0 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe71016d00 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe71016ce0 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe71016cd0 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe71016d00 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe71016ce0 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe71016d00 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe71016cd0 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe71016d40 a2=28 a3=0 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe71016af0 a2=50 a3=1 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit: BPF prog-id=164 op=LOAD Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe71016af0 a2=94 a3=5 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit: BPF prog-id=164 op=UNLOAD Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe71016ba0 a2=50 a3=1 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe71016cc0 a2=4 a3=38 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { confidentiality } for pid=3701 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe71016d10 a2=94 a3=6 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.956000 audit[3701]: AVC avc: denied { confidentiality } for pid=3701 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:48:03.956000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe710164c0 a2=94 a3=88 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.956000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { confidentiality } for pid=3701 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:48:03.957000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe710164c0 a2=94 a3=88 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.957000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe71017ef0 a2=10 a3=208 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.957000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe71017d90 a2=10 a3=3 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.957000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe71017d30 a2=10 a3=3 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.957000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.957000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:03.957000 audit[3701]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe71017d30 a2=10 a3=7 items=0 ppid=3462 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.957000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:48:03.964000 audit: BPF prog-id=159 op=UNLOAD Jul 10 00:48:04.063000 audit[3738]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3738 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:04.063000 audit[3738]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffc51483180 a2=0 a3=7ffc5148316c items=0 ppid=3462 pid=3738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.063000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:04.065000 audit[3733]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3733 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:04.065000 audit[3733]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffc08bfcf40 a2=0 a3=7ffc08bfcf2c items=0 ppid=3462 pid=3733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.065000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:04.070000 audit[3734]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3734 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:04.070000 audit[3734]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffd57f3d3a0 a2=0 a3=7ffd57f3d38c items=0 ppid=3462 pid=3734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.070000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:04.074000 audit[3737]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3737 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:04.074000 audit[3737]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffe7a52e930 a2=0 a3=7ffe7a52e91c items=0 ppid=3462 pid=3737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.074000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:04.190689 systemd-networkd[1019]: cali009086d7084: Link UP Jul 10 00:48:04.192615 systemd-networkd[1019]: cali009086d7084: Gained carrier Jul 10 00:48:04.192854 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali009086d7084: link becomes ready Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.739 [INFO][3603] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0 calico-apiserver-6f4f84749- calico-apiserver f6f00b3e-a850-4a67-9877-16e2b2fdf120 1022 0 2025-07-10 00:47:39 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6f4f84749 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6f4f84749-bc2qs eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali009086d7084 [] [] }} ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-bc2qs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.739 [INFO][3603] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-bc2qs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.782 [INFO][3645] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.783 [INFO][3645] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001a4e30), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6f4f84749-bc2qs", "timestamp":"2025-07-10 00:48:03.782956682 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.783 [INFO][3645] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.783 [INFO][3645] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.783 [INFO][3645] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.788 [INFO][3645] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" host="localhost" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.795 [INFO][3645] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.817 [INFO][3645] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.823 [INFO][3645] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.826 [INFO][3645] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.826 [INFO][3645] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" host="localhost" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.828 [INFO][3645] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3 Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:03.982 [INFO][3645] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" host="localhost" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:04.186 [INFO][3645] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" host="localhost" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:04.186 [INFO][3645] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" host="localhost" Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:04.186 [INFO][3645] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:04.210959 env[1202]: 2025-07-10 00:48:04.186 [INFO][3645] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:04.212201 env[1202]: 2025-07-10 00:48:04.188 [INFO][3603] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-bc2qs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0", GenerateName:"calico-apiserver-6f4f84749-", Namespace:"calico-apiserver", SelfLink:"", UID:"f6f00b3e-a850-4a67-9877-16e2b2fdf120", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f4f84749", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6f4f84749-bc2qs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali009086d7084", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:04.212201 env[1202]: 2025-07-10 00:48:04.188 [INFO][3603] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-bc2qs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:04.212201 env[1202]: 2025-07-10 00:48:04.188 [INFO][3603] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali009086d7084 ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-bc2qs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:04.212201 env[1202]: 2025-07-10 00:48:04.193 [INFO][3603] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-bc2qs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:04.212201 env[1202]: 2025-07-10 00:48:04.193 [INFO][3603] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-bc2qs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0", GenerateName:"calico-apiserver-6f4f84749-", Namespace:"calico-apiserver", SelfLink:"", UID:"f6f00b3e-a850-4a67-9877-16e2b2fdf120", ResourceVersion:"1022", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f4f84749", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3", Pod:"calico-apiserver-6f4f84749-bc2qs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali009086d7084", MAC:"06:94:65:bb:0b:a4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:04.212201 env[1202]: 2025-07-10 00:48:04.207 [INFO][3603] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-bc2qs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:04.225000 audit[3755]: NETFILTER_CFG table=filter:105 family=2 entries=50 op=nft_register_chain pid=3755 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:04.225000 audit[3755]: SYSCALL arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7ffe34039d00 a2=0 a3=7ffe34039cec items=0 ppid=3462 pid=3755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.225000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:04.244442 env[1202]: time="2025-07-10T00:48:04.244353440Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:48:04.244442 env[1202]: time="2025-07-10T00:48:04.244401241Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:48:04.244442 env[1202]: time="2025-07-10T00:48:04.244410869Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:48:04.244743 env[1202]: time="2025-07-10T00:48:04.244693058Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3 pid=3763 runtime=io.containerd.runc.v2 Jul 10 00:48:04.255501 systemd-networkd[1019]: calib39dceafb9c: Link UP Jul 10 00:48:04.259555 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:48:04.259598 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib39dceafb9c: link becomes ready Jul 10 00:48:04.259686 systemd-networkd[1019]: calib39dceafb9c: Gained carrier Jul 10 00:48:04.269355 systemd[1]: Started cri-containerd-1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3.scope. Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:03.784 [INFO][3630] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0 coredns-7c65d6cfc9- kube-system 5fdf3fd1-ad69-475d-821f-cc09b8131811 1023 0 2025-07-10 00:47:30 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-j9s7v eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calib39dceafb9c [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-j9s7v" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--j9s7v-" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:03.784 [INFO][3630] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-j9s7v" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:03.844 [INFO][3664] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" HandleID="k8s-pod-network.931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:03.845 [INFO][3664] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" HandleID="k8s-pod-network.931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251100), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-j9s7v", "timestamp":"2025-07-10 00:48:03.844721918 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:03.845 [INFO][3664] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.186 [INFO][3664] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.186 [INFO][3664] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.196 [INFO][3664] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" host="localhost" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.215 [INFO][3664] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.219 [INFO][3664] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.221 [INFO][3664] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.223 [INFO][3664] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.223 [INFO][3664] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" host="localhost" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.237 [INFO][3664] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.241 [INFO][3664] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" host="localhost" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.247 [INFO][3664] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" host="localhost" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.247 [INFO][3664] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" host="localhost" Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.247 [INFO][3664] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:04.278233 env[1202]: 2025-07-10 00:48:04.247 [INFO][3664] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" HandleID="k8s-pod-network.931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:04.278831 env[1202]: 2025-07-10 00:48:04.252 [INFO][3630] cni-plugin/k8s.go 418: Populated endpoint ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-j9s7v" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"5fdf3fd1-ad69-475d-821f-cc09b8131811", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-j9s7v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib39dceafb9c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:04.278831 env[1202]: 2025-07-10 00:48:04.252 [INFO][3630] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-j9s7v" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:04.278831 env[1202]: 2025-07-10 00:48:04.252 [INFO][3630] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib39dceafb9c ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-j9s7v" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:04.278831 env[1202]: 2025-07-10 00:48:04.264 [INFO][3630] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-j9s7v" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:04.278831 env[1202]: 2025-07-10 00:48:04.266 [INFO][3630] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-j9s7v" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"5fdf3fd1-ad69-475d-821f-cc09b8131811", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b", Pod:"coredns-7c65d6cfc9-j9s7v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib39dceafb9c", MAC:"fe:17:1b:82:99:ad", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:04.278831 env[1202]: 2025-07-10 00:48:04.276 [INFO][3630] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b" Namespace="kube-system" Pod="coredns-7c65d6cfc9-j9s7v" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:04.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit: BPF prog-id=165 op=LOAD Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3763 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135323663386232653534396666643838336538373835303335363335 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3763 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135323663386232653534396666643838336538373835303335363335 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit: BPF prog-id=166 op=LOAD Jul 10 00:48:04.282000 audit[3773]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00028fc50 items=0 ppid=3763 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135323663386232653534396666643838336538373835303335363335 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.282000 audit: BPF prog-id=167 op=LOAD Jul 10 00:48:04.282000 audit[3773]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00028fc98 items=0 ppid=3763 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135323663386232653534396666643838336538373835303335363335 Jul 10 00:48:04.283000 audit: BPF prog-id=167 op=UNLOAD Jul 10 00:48:04.283000 audit: BPF prog-id=166 op=UNLOAD Jul 10 00:48:04.283000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.283000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.283000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.283000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.283000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.283000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.283000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.283000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.283000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.283000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.283000 audit: BPF prog-id=168 op=LOAD Jul 10 00:48:04.283000 audit[3773]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0004180a8 items=0 ppid=3763 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135323663386232653534396666643838336538373835303335363335 Jul 10 00:48:04.284432 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:48:04.289312 env[1202]: time="2025-07-10T00:48:04.289223029Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:48:04.289312 env[1202]: time="2025-07-10T00:48:04.289270177Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:48:04.289312 env[1202]: time="2025-07-10T00:48:04.289280667Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:48:04.289519 env[1202]: time="2025-07-10T00:48:04.289471445Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b pid=3807 runtime=io.containerd.runc.v2 Jul 10 00:48:04.304647 systemd[1]: Started cri-containerd-931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b.scope. Jul 10 00:48:04.306521 env[1202]: time="2025-07-10T00:48:04.306474522Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f4f84749-bc2qs,Uid:f6f00b3e-a850-4a67-9877-16e2b2fdf120,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\"" Jul 10 00:48:04.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit: BPF prog-id=169 op=LOAD Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3807 pid=3818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933316136656637303363336234323036326333353664353136636664 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3807 pid=3818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933316136656637303363336234323036326333353664353136636664 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.316000 audit: BPF prog-id=170 op=LOAD Jul 10 00:48:04.316000 audit[3818]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000404180 items=0 ppid=3807 pid=3818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933316136656637303363336234323036326333353664353136636664 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit: BPF prog-id=171 op=LOAD Jul 10 00:48:04.317000 audit[3818]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0004041c8 items=0 ppid=3807 pid=3818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933316136656637303363336234323036326333353664353136636664 Jul 10 00:48:04.317000 audit: BPF prog-id=171 op=UNLOAD Jul 10 00:48:04.317000 audit: BPF prog-id=170 op=UNLOAD Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { perfmon } for pid=3818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit[3818]: AVC avc: denied { bpf } for pid=3818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.317000 audit: BPF prog-id=172 op=LOAD Jul 10 00:48:04.317000 audit[3818]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0004045d8 items=0 ppid=3807 pid=3818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933316136656637303363336234323036326333353664353136636664 Jul 10 00:48:04.318498 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:48:04.339233 env[1202]: time="2025-07-10T00:48:04.339197295Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-j9s7v,Uid:5fdf3fd1-ad69-475d-821f-cc09b8131811,Namespace:kube-system,Attempt:1,} returns sandbox id \"931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b\"" Jul 10 00:48:04.340091 kubelet[1944]: E0710 00:48:04.339918 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:04.341625 env[1202]: time="2025-07-10T00:48:04.341602683Z" level=info msg="CreateContainer within sandbox \"931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:48:04.357349 env[1202]: time="2025-07-10T00:48:04.357305758Z" level=info msg="CreateContainer within sandbox \"931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"b277cfe0a7fa6526c31af3791cb788ea55a41389dda5b0ea46e35bbffa321fbe\"" Jul 10 00:48:04.357771 env[1202]: time="2025-07-10T00:48:04.357730134Z" level=info msg="StartContainer for \"b277cfe0a7fa6526c31af3791cb788ea55a41389dda5b0ea46e35bbffa321fbe\"" Jul 10 00:48:04.363842 systemd-networkd[1019]: calid1c8ba957a0: Gained IPv6LL Jul 10 00:48:04.372022 systemd[1]: Started cri-containerd-b277cfe0a7fa6526c31af3791cb788ea55a41389dda5b0ea46e35bbffa321fbe.scope. Jul 10 00:48:04.387000 audit[3871]: NETFILTER_CFG table=filter:106 family=2 entries=46 op=nft_register_chain pid=3871 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:04.387000 audit[3871]: SYSCALL arch=c000003e syscall=46 success=yes exit=23740 a0=3 a1=7fff97b57010 a2=0 a3=7fff97b56ffc items=0 ppid=3462 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.387000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:04.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit: BPF prog-id=173 op=LOAD Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3807 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373763666530613766613635323663333161663337393163623738 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3807 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373763666530613766613635323663333161663337393163623738 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.392000 audit: BPF prog-id=174 op=LOAD Jul 10 00:48:04.392000 audit[3853]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002cbd30 items=0 ppid=3807 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373763666530613766613635323663333161663337393163623738 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit: BPF prog-id=175 op=LOAD Jul 10 00:48:04.393000 audit[3853]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002cbd78 items=0 ppid=3807 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373763666530613766613635323663333161663337393163623738 Jul 10 00:48:04.393000 audit: BPF prog-id=175 op=UNLOAD Jul 10 00:48:04.393000 audit: BPF prog-id=174 op=UNLOAD Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { perfmon } for pid=3853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit[3853]: AVC avc: denied { bpf } for pid=3853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.393000 audit: BPF prog-id=176 op=LOAD Jul 10 00:48:04.393000 audit[3853]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00031c188 items=0 ppid=3807 pid=3853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.393000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373763666530613766613635323663333161663337393163623738 Jul 10 00:48:04.407395 env[1202]: time="2025-07-10T00:48:04.407352199Z" level=info msg="StartContainer for \"b277cfe0a7fa6526c31af3791cb788ea55a41389dda5b0ea46e35bbffa321fbe\" returns successfully" Jul 10 00:48:04.439000 audit[3864]: AVC avc: denied { getattr } for pid=3864 comm="coredns" path="cgroup:[4026532649]" dev="nsfs" ino=4026532649 scontext=system_u:system_r:svirt_lxc_net_t:s0:c137,c253 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:48:04.439000 audit[3864]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a9a8 a2=c0005a6788 a3=0 items=0 ppid=3807 pid=3864 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c137,c253 key=(null) Jul 10 00:48:04.439000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:48:04.777591 kubelet[1944]: E0710 00:48:04.776866 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:04.799996 kubelet[1944]: I0710 00:48:04.799920 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-j9s7v" podStartSLOduration=34.799898114 podStartE2EDuration="34.799898114s" podCreationTimestamp="2025-07-10 00:47:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:48:04.799372767 +0000 UTC m=+41.306515312" watchObservedRunningTime="2025-07-10 00:48:04.799898114 +0000 UTC m=+41.307040669" Jul 10 00:48:04.810000 audit[3888]: NETFILTER_CFG table=filter:107 family=2 entries=20 op=nft_register_rule pid=3888 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:04.810000 audit[3888]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffda71e07a0 a2=0 a3=7ffda71e078c items=0 ppid=2051 pid=3888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.810000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:04.816000 audit[3888]: NETFILTER_CFG table=nat:108 family=2 entries=14 op=nft_register_rule pid=3888 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:04.816000 audit[3888]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffda71e07a0 a2=0 a3=0 items=0 ppid=2051 pid=3888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.816000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:04.828000 audit[3890]: NETFILTER_CFG table=filter:109 family=2 entries=17 op=nft_register_rule pid=3890 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:04.828000 audit[3890]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe68031350 a2=0 a3=7ffe6803133c items=0 ppid=2051 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.828000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:04.832000 audit[3890]: NETFILTER_CFG table=nat:110 family=2 entries=35 op=nft_register_chain pid=3890 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:04.832000 audit[3890]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe68031350 a2=0 a3=7ffe6803133c items=0 ppid=2051 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.832000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:05.206509 env[1202]: time="2025-07-10T00:48:05.206455087Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:05.208434 env[1202]: time="2025-07-10T00:48:05.208382627Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:05.210022 env[1202]: time="2025-07-10T00:48:05.209987662Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:05.211425 env[1202]: time="2025-07-10T00:48:05.211396949Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:05.211918 env[1202]: time="2025-07-10T00:48:05.211892048Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 10 00:48:05.213046 env[1202]: time="2025-07-10T00:48:05.213019856Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:48:05.214134 env[1202]: time="2025-07-10T00:48:05.214104483Z" level=info msg="CreateContainer within sandbox \"7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 10 00:48:05.229205 env[1202]: time="2025-07-10T00:48:05.229161392Z" level=info msg="CreateContainer within sandbox \"7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"44b5616a4f7296a0e80548d5df34ba6a45ec396e601e48ad898b7c18fd80dfd3\"" Jul 10 00:48:05.229638 env[1202]: time="2025-07-10T00:48:05.229606528Z" level=info msg="StartContainer for \"44b5616a4f7296a0e80548d5df34ba6a45ec396e601e48ad898b7c18fd80dfd3\"" Jul 10 00:48:05.245940 systemd[1]: Started cri-containerd-44b5616a4f7296a0e80548d5df34ba6a45ec396e601e48ad898b7c18fd80dfd3.scope. Jul 10 00:48:05.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit: BPF prog-id=177 op=LOAD Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3383 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434623536313661346637323936613065383035343864356466333462 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3383 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434623536313661346637323936613065383035343864356466333462 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit: BPF prog-id=178 op=LOAD Jul 10 00:48:05.258000 audit[3900]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001c8660 items=0 ppid=3383 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434623536313661346637323936613065383035343864356466333462 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.258000 audit: BPF prog-id=179 op=LOAD Jul 10 00:48:05.258000 audit[3900]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001c86a8 items=0 ppid=3383 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434623536313661346637323936613065383035343864356466333462 Jul 10 00:48:05.259000 audit: BPF prog-id=179 op=UNLOAD Jul 10 00:48:05.259000 audit: BPF prog-id=178 op=UNLOAD Jul 10 00:48:05.259000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.259000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.259000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.259000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.259000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.259000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.259000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.259000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.259000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.259000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.259000 audit: BPF prog-id=180 op=LOAD Jul 10 00:48:05.259000 audit[3900]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001c8ab8 items=0 ppid=3383 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434623536313661346637323936613065383035343864356466333462 Jul 10 00:48:05.284075 env[1202]: time="2025-07-10T00:48:05.284029220Z" level=info msg="StartContainer for \"44b5616a4f7296a0e80548d5df34ba6a45ec396e601e48ad898b7c18fd80dfd3\" returns successfully" Jul 10 00:48:05.291000 audit[3911]: AVC avc: denied { search } for pid=3911 comm="nginx" name="crypto" dev="proc" ino=27729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c209,c843 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 10 00:48:05.291000 audit[3911]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fe886226728 a2=0 a3=0 items=0 ppid=3383 pid=3911 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c209,c843 key=(null) Jul 10 00:48:05.291000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 10 00:48:05.450983 systemd-networkd[1019]: calib39dceafb9c: Gained IPv6LL Jul 10 00:48:05.580741 env[1202]: time="2025-07-10T00:48:05.575998519Z" level=info msg="StopPodSandbox for \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\"" Jul 10 00:48:05.580741 env[1202]: time="2025-07-10T00:48:05.576294244Z" level=info msg="StopPodSandbox for \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\"" Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.625 [INFO][3951] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.625 [INFO][3951] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" iface="eth0" netns="/var/run/netns/cni-9609b65f-cb03-a70b-0138-b6c346ca4f02" Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.625 [INFO][3951] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" iface="eth0" netns="/var/run/netns/cni-9609b65f-cb03-a70b-0138-b6c346ca4f02" Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.625 [INFO][3951] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" iface="eth0" netns="/var/run/netns/cni-9609b65f-cb03-a70b-0138-b6c346ca4f02" Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.625 [INFO][3951] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.625 [INFO][3951] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.647 [INFO][3977] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" HandleID="k8s-pod-network.c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.647 [INFO][3977] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.647 [INFO][3977] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.652 [WARNING][3977] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" HandleID="k8s-pod-network.c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.652 [INFO][3977] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" HandleID="k8s-pod-network.c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.653 [INFO][3977] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:05.658668 env[1202]: 2025-07-10 00:48:05.655 [INFO][3951] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:05.659405 env[1202]: time="2025-07-10T00:48:05.658825467Z" level=info msg="TearDown network for sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\" successfully" Jul 10 00:48:05.659405 env[1202]: time="2025-07-10T00:48:05.658856926Z" level=info msg="StopPodSandbox for \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\" returns successfully" Jul 10 00:48:05.659462 kubelet[1944]: E0710 00:48:05.659303 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:05.661632 env[1202]: time="2025-07-10T00:48:05.661594657Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-5nrl8,Uid:92f142e6-5a1f-4990-8f0f-7b715f748a50,Namespace:kube-system,Attempt:1,}" Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.620 [INFO][3960] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.620 [INFO][3960] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" iface="eth0" netns="/var/run/netns/cni-129edbee-e8fd-b48d-9f04-814392dcc01b" Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.620 [INFO][3960] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" iface="eth0" netns="/var/run/netns/cni-129edbee-e8fd-b48d-9f04-814392dcc01b" Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.621 [INFO][3960] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" iface="eth0" netns="/var/run/netns/cni-129edbee-e8fd-b48d-9f04-814392dcc01b" Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.621 [INFO][3960] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.621 [INFO][3960] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.647 [INFO][3970] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" HandleID="k8s-pod-network.0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.647 [INFO][3970] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.653 [INFO][3970] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.657 [WARNING][3970] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" HandleID="k8s-pod-network.0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.657 [INFO][3970] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" HandleID="k8s-pod-network.0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.659 [INFO][3970] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:05.663272 env[1202]: 2025-07-10 00:48:05.661 [INFO][3960] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:05.663698 env[1202]: time="2025-07-10T00:48:05.663361575Z" level=info msg="TearDown network for sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\" successfully" Jul 10 00:48:05.663698 env[1202]: time="2025-07-10T00:48:05.663381833Z" level=info msg="StopPodSandbox for \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\" returns successfully" Jul 10 00:48:05.663979 env[1202]: time="2025-07-10T00:48:05.663939992Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-67c56776df-9wrhd,Uid:a73e65fd-c9a6-4aca-80b1-99749f4de040,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:48:05.772479 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:48:05.772586 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali91f5794ad13: link becomes ready Jul 10 00:48:05.772976 systemd-networkd[1019]: cali91f5794ad13: Link UP Jul 10 00:48:05.773285 systemd-networkd[1019]: cali91f5794ad13: Gained carrier Jul 10 00:48:05.773393 systemd-networkd[1019]: vxlan.calico: Gained IPv6LL Jul 10 00:48:05.783845 kubelet[1944]: E0710 00:48:05.783493 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:05.789771 systemd[1]: run-containerd-runc-k8s.io-44b5616a4f7296a0e80548d5df34ba6a45ec396e601e48ad898b7c18fd80dfd3-runc.xjy8DX.mount: Deactivated successfully. Jul 10 00:48:05.789879 systemd[1]: run-netns-cni\x2d129edbee\x2de8fd\x2db48d\x2d9f04\x2d814392dcc01b.mount: Deactivated successfully. Jul 10 00:48:05.789937 systemd[1]: run-netns-cni\x2d9609b65f\x2dcb03\x2da70b\x2d0138\x2db6c346ca4f02.mount: Deactivated successfully. Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.708 [INFO][3987] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0 coredns-7c65d6cfc9- kube-system 92f142e6-5a1f-4990-8f0f-7b715f748a50 1066 0 2025-07-10 00:47:30 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-5nrl8 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali91f5794ad13 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Namespace="kube-system" Pod="coredns-7c65d6cfc9-5nrl8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--5nrl8-" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.709 [INFO][3987] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Namespace="kube-system" Pod="coredns-7c65d6cfc9-5nrl8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.735 [INFO][4016] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" HandleID="k8s-pod-network.b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.736 [INFO][4016] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" HandleID="k8s-pod-network.b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003ba8c0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-5nrl8", "timestamp":"2025-07-10 00:48:05.735829869 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.736 [INFO][4016] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.736 [INFO][4016] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.736 [INFO][4016] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.744 [INFO][4016] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" host="localhost" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.747 [INFO][4016] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.750 [INFO][4016] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.751 [INFO][4016] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.753 [INFO][4016] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.753 [INFO][4016] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" host="localhost" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.754 [INFO][4016] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.757 [INFO][4016] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" host="localhost" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.762 [INFO][4016] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" host="localhost" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.762 [INFO][4016] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" host="localhost" Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.762 [INFO][4016] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:05.792817 env[1202]: 2025-07-10 00:48:05.762 [INFO][4016] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" HandleID="k8s-pod-network.b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:05.793377 env[1202]: 2025-07-10 00:48:05.764 [INFO][3987] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Namespace="kube-system" Pod="coredns-7c65d6cfc9-5nrl8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"92f142e6-5a1f-4990-8f0f-7b715f748a50", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-5nrl8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali91f5794ad13", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:05.793377 env[1202]: 2025-07-10 00:48:05.764 [INFO][3987] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Namespace="kube-system" Pod="coredns-7c65d6cfc9-5nrl8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:05.793377 env[1202]: 2025-07-10 00:48:05.764 [INFO][3987] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali91f5794ad13 ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Namespace="kube-system" Pod="coredns-7c65d6cfc9-5nrl8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:05.793377 env[1202]: 2025-07-10 00:48:05.773 [INFO][3987] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Namespace="kube-system" Pod="coredns-7c65d6cfc9-5nrl8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:05.793377 env[1202]: 2025-07-10 00:48:05.773 [INFO][3987] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Namespace="kube-system" Pod="coredns-7c65d6cfc9-5nrl8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"92f142e6-5a1f-4990-8f0f-7b715f748a50", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c", Pod:"coredns-7c65d6cfc9-5nrl8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali91f5794ad13", MAC:"9a:74:23:f1:1d:ea", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:05.793377 env[1202]: 2025-07-10 00:48:05.781 [INFO][3987] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c" Namespace="kube-system" Pod="coredns-7c65d6cfc9-5nrl8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:05.800000 audit[4041]: NETFILTER_CFG table=filter:111 family=2 entries=40 op=nft_register_chain pid=4041 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:05.803010 kernel: kauditd_printk_skb: 932 callbacks suppressed Jul 10 00:48:05.803067 kernel: audit: type=1325 audit(1752108485.800:1216): table=filter:111 family=2 entries=40 op=nft_register_chain pid=4041 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:05.800000 audit[4041]: SYSCALL arch=c000003e syscall=46 success=yes exit=20344 a0=3 a1=7ffcc4cd1ca0 a2=0 a3=7ffcc4cd1c8c items=0 ppid=3462 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.806870 env[1202]: time="2025-07-10T00:48:05.805540423Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:48:05.806870 env[1202]: time="2025-07-10T00:48:05.805581059Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:48:05.806870 env[1202]: time="2025-07-10T00:48:05.805593903Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:48:05.806870 env[1202]: time="2025-07-10T00:48:05.805729928Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c pid=4048 runtime=io.containerd.runc.v2 Jul 10 00:48:05.811394 kernel: audit: type=1300 audit(1752108485.800:1216): arch=c000003e syscall=46 success=yes exit=20344 a0=3 a1=7ffcc4cd1ca0 a2=0 a3=7ffcc4cd1c8c items=0 ppid=3462 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.811444 kernel: audit: type=1327 audit(1752108485.800:1216): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:05.800000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:05.827124 systemd[1]: Started cri-containerd-b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c.scope. Jul 10 00:48:05.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840726 kernel: audit: type=1400 audit(1752108485.836:1217): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840803 kernel: audit: type=1400 audit(1752108485.836:1218): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848750 kernel: audit: type=1400 audit(1752108485.836:1219): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848883 kernel: audit: type=1400 audit(1752108485.836:1220): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.853715 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:48:05.856545 kernel: audit: type=1400 audit(1752108485.836:1221): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.856591 kernel: audit: type=1400 audit(1752108485.836:1222): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.859645 kernel: audit: type=1400 audit(1752108485.836:1223): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit: BPF prog-id=181 op=LOAD Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4048 pid=4058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235353361343835396639633661653866656666663634393162616466 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4048 pid=4058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235353361343835396639633661653866656666663634393162616466 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.840000 audit: BPF prog-id=182 op=LOAD Jul 10 00:48:05.840000 audit[4058]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000220370 items=0 ppid=4048 pid=4058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235353361343835396639633661653866656666663634393162616466 Jul 10 00:48:05.845000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.845000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.845000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.845000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.845000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.845000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.845000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.845000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.845000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.845000 audit: BPF prog-id=183 op=LOAD Jul 10 00:48:05.845000 audit[4058]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002203b8 items=0 ppid=4048 pid=4058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235353361343835396639633661653866656666663634393162616466 Jul 10 00:48:05.848000 audit: BPF prog-id=183 op=UNLOAD Jul 10 00:48:05.848000 audit: BPF prog-id=182 op=UNLOAD Jul 10 00:48:05.848000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848000 audit[4058]: AVC avc: denied { perfmon } for pid=4058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848000 audit[4058]: AVC avc: denied { bpf } for pid=4058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.848000 audit: BPF prog-id=184 op=LOAD Jul 10 00:48:05.848000 audit[4058]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002207c8 items=0 ppid=4048 pid=4058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.848000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235353361343835396639633661653866656666663634393162616466 Jul 10 00:48:05.881099 env[1202]: time="2025-07-10T00:48:05.881057992Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-5nrl8,Uid:92f142e6-5a1f-4990-8f0f-7b715f748a50,Namespace:kube-system,Attempt:1,} returns sandbox id \"b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c\"" Jul 10 00:48:05.881870 systemd-networkd[1019]: cali92bf9dbcbf7: Link UP Jul 10 00:48:05.882676 kubelet[1944]: E0710 00:48:05.882467 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:05.885120 env[1202]: time="2025-07-10T00:48:05.885098120Z" level=info msg="CreateContainer within sandbox \"b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:48:05.888243 systemd-networkd[1019]: cali92bf9dbcbf7: Gained carrier Jul 10 00:48:05.888753 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali92bf9dbcbf7: link becomes ready Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.710 [INFO][3999] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0 calico-apiserver-67c56776df- calico-apiserver a73e65fd-c9a6-4aca-80b1-99749f4de040 1065 0 2025-07-10 00:47:40 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:67c56776df projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-67c56776df-9wrhd eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali92bf9dbcbf7 [] [] }} ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Namespace="calico-apiserver" Pod="calico-apiserver-67c56776df-9wrhd" WorkloadEndpoint="localhost-k8s-calico--apiserver--67c56776df--9wrhd-" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.710 [INFO][3999] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Namespace="calico-apiserver" Pod="calico-apiserver-67c56776df-9wrhd" WorkloadEndpoint="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.740 [INFO][4022] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" HandleID="k8s-pod-network.8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.740 [INFO][4022] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" HandleID="k8s-pod-network.8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c8f70), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-67c56776df-9wrhd", "timestamp":"2025-07-10 00:48:05.740007184 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.740 [INFO][4022] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.762 [INFO][4022] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.762 [INFO][4022] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.849 [INFO][4022] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" host="localhost" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.853 [INFO][4022] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.859 [INFO][4022] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.861 [INFO][4022] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.863 [INFO][4022] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.863 [INFO][4022] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" host="localhost" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.865 [INFO][4022] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29 Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.870 [INFO][4022] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" host="localhost" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.876 [INFO][4022] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" host="localhost" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.876 [INFO][4022] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" host="localhost" Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.876 [INFO][4022] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:05.905795 env[1202]: 2025-07-10 00:48:05.876 [INFO][4022] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" HandleID="k8s-pod-network.8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:05.906411 env[1202]: 2025-07-10 00:48:05.879 [INFO][3999] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Namespace="calico-apiserver" Pod="calico-apiserver-67c56776df-9wrhd" WorkloadEndpoint="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0", GenerateName:"calico-apiserver-67c56776df-", Namespace:"calico-apiserver", SelfLink:"", UID:"a73e65fd-c9a6-4aca-80b1-99749f4de040", ResourceVersion:"1065", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"67c56776df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-67c56776df-9wrhd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali92bf9dbcbf7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:05.906411 env[1202]: 2025-07-10 00:48:05.879 [INFO][3999] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Namespace="calico-apiserver" Pod="calico-apiserver-67c56776df-9wrhd" WorkloadEndpoint="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:05.906411 env[1202]: 2025-07-10 00:48:05.879 [INFO][3999] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali92bf9dbcbf7 ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Namespace="calico-apiserver" Pod="calico-apiserver-67c56776df-9wrhd" WorkloadEndpoint="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:05.906411 env[1202]: 2025-07-10 00:48:05.888 [INFO][3999] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Namespace="calico-apiserver" Pod="calico-apiserver-67c56776df-9wrhd" WorkloadEndpoint="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:05.906411 env[1202]: 2025-07-10 00:48:05.889 [INFO][3999] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Namespace="calico-apiserver" Pod="calico-apiserver-67c56776df-9wrhd" WorkloadEndpoint="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0", GenerateName:"calico-apiserver-67c56776df-", Namespace:"calico-apiserver", SelfLink:"", UID:"a73e65fd-c9a6-4aca-80b1-99749f4de040", ResourceVersion:"1065", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"67c56776df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29", Pod:"calico-apiserver-67c56776df-9wrhd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali92bf9dbcbf7", MAC:"d6:26:d1:ef:36:a3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:05.906411 env[1202]: 2025-07-10 00:48:05.898 [INFO][3999] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29" Namespace="calico-apiserver" Pod="calico-apiserver-67c56776df-9wrhd" WorkloadEndpoint="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:05.907404 env[1202]: time="2025-07-10T00:48:05.907361964Z" level=info msg="CreateContainer within sandbox \"b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"993365453c49bd8280664ceee0a30361920ff404229d7f91762383e13ef58271\"" Jul 10 00:48:05.908267 env[1202]: time="2025-07-10T00:48:05.908232509Z" level=info msg="StartContainer for \"993365453c49bd8280664ceee0a30361920ff404229d7f91762383e13ef58271\"" Jul 10 00:48:05.909000 audit[4093]: NETFILTER_CFG table=filter:112 family=2 entries=55 op=nft_register_chain pid=4093 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:05.909000 audit[4093]: SYSCALL arch=c000003e syscall=46 success=yes exit=28304 a0=3 a1=7fff3c533550 a2=0 a3=7fff3c53353c items=0 ppid=3462 pid=4093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.909000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:05.918610 env[1202]: time="2025-07-10T00:48:05.918552732Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:48:05.918756 env[1202]: time="2025-07-10T00:48:05.918694788Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:48:05.918851 env[1202]: time="2025-07-10T00:48:05.918827557Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:48:05.919133 env[1202]: time="2025-07-10T00:48:05.919095851Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29 pid=4115 runtime=io.containerd.runc.v2 Jul 10 00:48:05.922971 systemd[1]: Started cri-containerd-993365453c49bd8280664ceee0a30361920ff404229d7f91762383e13ef58271.scope. Jul 10 00:48:05.929952 systemd[1]: Started cri-containerd-8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29.scope. Jul 10 00:48:05.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.934000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.934000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.934000 audit: BPF prog-id=185 op=LOAD Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4048 pid=4101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333336353435336334396264383238303636346365656530613330 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4048 pid=4101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333336353435336334396264383238303636346365656530613330 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit: BPF prog-id=186 op=LOAD Jul 10 00:48:05.935000 audit[4101]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00029d390 items=0 ppid=4048 pid=4101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333336353435336334396264383238303636346365656530613330 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit: BPF prog-id=187 op=LOAD Jul 10 00:48:05.935000 audit[4101]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00029d3d8 items=0 ppid=4048 pid=4101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333336353435336334396264383238303636346365656530613330 Jul 10 00:48:05.935000 audit: BPF prog-id=187 op=UNLOAD Jul 10 00:48:05.935000 audit: BPF prog-id=186 op=UNLOAD Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { perfmon } for pid=4101 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit[4101]: AVC avc: denied { bpf } for pid=4101 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.935000 audit: BPF prog-id=188 op=LOAD Jul 10 00:48:05.935000 audit[4101]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00029d7e8 items=0 ppid=4048 pid=4101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.935000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939333336353435336334396264383238303636346365656530613330 Jul 10 00:48:05.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit: BPF prog-id=189 op=LOAD Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4115 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863303866306530663630356135663730353335306263373761656666 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4115 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863303866306530663630356135663730353335306263373761656666 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit: BPF prog-id=190 op=LOAD Jul 10 00:48:05.946000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002d5ec0 items=0 ppid=4115 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863303866306530663630356135663730353335306263373761656666 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit: BPF prog-id=191 op=LOAD Jul 10 00:48:05.946000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002d5f08 items=0 ppid=4115 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863303866306530663630356135663730353335306263373761656666 Jul 10 00:48:05.946000 audit: BPF prog-id=191 op=UNLOAD Jul 10 00:48:05.946000 audit: BPF prog-id=190 op=UNLOAD Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { perfmon } for pid=4128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit[4128]: AVC avc: denied { bpf } for pid=4128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:05.946000 audit: BPF prog-id=192 op=LOAD Jul 10 00:48:05.946000 audit[4128]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003ca318 items=0 ppid=4115 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:05.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863303866306530663630356135663730353335306263373761656666 Jul 10 00:48:05.951472 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:48:05.955451 env[1202]: time="2025-07-10T00:48:05.955407037Z" level=info msg="StartContainer for \"993365453c49bd8280664ceee0a30361920ff404229d7f91762383e13ef58271\" returns successfully" Jul 10 00:48:05.966000 audit[4138]: AVC avc: denied { getattr } for pid=4138 comm="coredns" path="cgroup:[4026532311]" dev="nsfs" ino=4026532311 scontext=system_u:system_r:svirt_lxc_net_t:s0:c381,c448 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:48:05.966000 audit[4138]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c00050dd78 a3=0 items=0 ppid=4048 pid=4138 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c381,c448 key=(null) Jul 10 00:48:05.966000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:48:05.974069 env[1202]: time="2025-07-10T00:48:05.974015586Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-67c56776df-9wrhd,Uid:a73e65fd-c9a6-4aca-80b1-99749f4de040,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29\"" Jul 10 00:48:06.154971 systemd-networkd[1019]: cali009086d7084: Gained IPv6LL Jul 10 00:48:06.576274 env[1202]: time="2025-07-10T00:48:06.576215081Z" level=info msg="StopPodSandbox for \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\"" Jul 10 00:48:06.576274 env[1202]: time="2025-07-10T00:48:06.576257501Z" level=info msg="StopPodSandbox for \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\"" Jul 10 00:48:06.787475 kubelet[1944]: E0710 00:48:06.787438 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:06.787915 kubelet[1944]: E0710 00:48:06.787885 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:06.789560 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1889049733.mount: Deactivated successfully. Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.722 [INFO][4204] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.722 [INFO][4204] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" iface="eth0" netns="/var/run/netns/cni-d48e145d-925e-fa9e-4d62-4635d4776e4a" Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.722 [INFO][4204] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" iface="eth0" netns="/var/run/netns/cni-d48e145d-925e-fa9e-4d62-4635d4776e4a" Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.722 [INFO][4204] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" iface="eth0" netns="/var/run/netns/cni-d48e145d-925e-fa9e-4d62-4635d4776e4a" Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.722 [INFO][4204] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.722 [INFO][4204] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.775 [INFO][4215] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" HandleID="k8s-pod-network.0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.775 [INFO][4215] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.775 [INFO][4215] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.780 [WARNING][4215] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" HandleID="k8s-pod-network.0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.781 [INFO][4215] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" HandleID="k8s-pod-network.0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.782 [INFO][4215] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:06.797967 env[1202]: 2025-07-10 00:48:06.791 [INFO][4204] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:06.801094 kubelet[1944]: I0710 00:48:06.799878 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-5nrl8" podStartSLOduration=36.799850373 podStartE2EDuration="36.799850373s" podCreationTimestamp="2025-07-10 00:47:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:48:06.799832079 +0000 UTC m=+43.306974624" watchObservedRunningTime="2025-07-10 00:48:06.799850373 +0000 UTC m=+43.306992928" Jul 10 00:48:06.800567 systemd[1]: run-netns-cni\x2dd48e145d\x2d925e\x2dfa9e\x2d4d62\x2d4635d4776e4a.mount: Deactivated successfully. Jul 10 00:48:06.803690 env[1202]: time="2025-07-10T00:48:06.803555141Z" level=info msg="TearDown network for sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\" successfully" Jul 10 00:48:06.803690 env[1202]: time="2025-07-10T00:48:06.803617408Z" level=info msg="StopPodSandbox for \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\" returns successfully" Jul 10 00:48:06.804366 env[1202]: time="2025-07-10T00:48:06.804331559Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-h48tl,Uid:b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89,Namespace:calico-system,Attempt:1,}" Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.727 [INFO][4195] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.727 [INFO][4195] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" iface="eth0" netns="/var/run/netns/cni-7bd71825-fd91-a292-626e-04aa4b810578" Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.727 [INFO][4195] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" iface="eth0" netns="/var/run/netns/cni-7bd71825-fd91-a292-626e-04aa4b810578" Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.727 [INFO][4195] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" iface="eth0" netns="/var/run/netns/cni-7bd71825-fd91-a292-626e-04aa4b810578" Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.727 [INFO][4195] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.727 [INFO][4195] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.788 [INFO][4221] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" HandleID="k8s-pod-network.65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.790 [INFO][4221] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.790 [INFO][4221] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.802 [WARNING][4221] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" HandleID="k8s-pod-network.65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.802 [INFO][4221] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" HandleID="k8s-pod-network.65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.805 [INFO][4221] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:06.816429 env[1202]: 2025-07-10 00:48:06.814 [INFO][4195] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:06.817000 audit[4231]: NETFILTER_CFG table=filter:113 family=2 entries=14 op=nft_register_rule pid=4231 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:06.817000 audit[4231]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc1fdd3e60 a2=0 a3=7ffc1fdd3e4c items=0 ppid=2051 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.817000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:06.819596 systemd[1]: run-netns-cni\x2d7bd71825\x2dfd91\x2da292\x2d626e\x2d04aa4b810578.mount: Deactivated successfully. Jul 10 00:48:06.824843 env[1202]: time="2025-07-10T00:48:06.816598045Z" level=info msg="TearDown network for sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\" successfully" Jul 10 00:48:06.824843 env[1202]: time="2025-07-10T00:48:06.816625366Z" level=info msg="StopPodSandbox for \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\" returns successfully" Jul 10 00:48:06.824843 env[1202]: time="2025-07-10T00:48:06.817217467Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qlpnz,Uid:d5ed6e84-883c-4226-9ad8-831f6e16569a,Namespace:calico-system,Attempt:1,}" Jul 10 00:48:06.827000 audit[4231]: NETFILTER_CFG table=nat:114 family=2 entries=44 op=nft_register_rule pid=4231 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:06.827000 audit[4231]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffc1fdd3e60 a2=0 a3=7ffc1fdd3e4c items=0 ppid=2051 pid=4231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.827000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:06.844000 audit[4246]: NETFILTER_CFG table=filter:115 family=2 entries=14 op=nft_register_rule pid=4246 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:06.844000 audit[4246]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd51f3af00 a2=0 a3=7ffd51f3aeec items=0 ppid=2051 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.844000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:06.854000 audit[4246]: NETFILTER_CFG table=nat:116 family=2 entries=56 op=nft_register_chain pid=4246 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:06.854000 audit[4246]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffd51f3af00 a2=0 a3=7ffd51f3aeec items=0 ppid=2051 pid=4246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.854000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:06.939563 systemd-networkd[1019]: cali203b9d94aa6: Link UP Jul 10 00:48:06.941735 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:48:06.941790 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali203b9d94aa6: link becomes ready Jul 10 00:48:06.942814 systemd-networkd[1019]: cali203b9d94aa6: Gained carrier Jul 10 00:48:06.946690 systemd[1]: Started sshd@8-10.0.0.142:22-10.0.0.1:53398.service. Jul 10 00:48:06.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.142:22-10.0.0.1:53398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.865 [INFO][4232] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--h48tl-eth0 goldmane-58fd7646b9- calico-system b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89 1092 0 2025-07-10 00:47:41 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-h48tl eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali203b9d94aa6 [] [] }} ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Namespace="calico-system" Pod="goldmane-58fd7646b9-h48tl" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--h48tl-" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.865 [INFO][4232] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Namespace="calico-system" Pod="goldmane-58fd7646b9-h48tl" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.901 [INFO][4262] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" HandleID="k8s-pod-network.cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.901 [INFO][4262] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" HandleID="k8s-pod-network.cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000354410), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-h48tl", "timestamp":"2025-07-10 00:48:06.901309607 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.901 [INFO][4262] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.901 [INFO][4262] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.901 [INFO][4262] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.907 [INFO][4262] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" host="localhost" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.910 [INFO][4262] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.915 [INFO][4262] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.916 [INFO][4262] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.918 [INFO][4262] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.918 [INFO][4262] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" host="localhost" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.920 [INFO][4262] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.924 [INFO][4262] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" host="localhost" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.929 [INFO][4262] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" host="localhost" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.929 [INFO][4262] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" host="localhost" Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.929 [INFO][4262] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:06.957307 env[1202]: 2025-07-10 00:48:06.929 [INFO][4262] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" HandleID="k8s-pod-network.cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:06.958038 env[1202]: 2025-07-10 00:48:06.932 [INFO][4232] cni-plugin/k8s.go 418: Populated endpoint ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Namespace="calico-system" Pod="goldmane-58fd7646b9-h48tl" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--h48tl-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89", ResourceVersion:"1092", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-h48tl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali203b9d94aa6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:06.958038 env[1202]: 2025-07-10 00:48:06.932 [INFO][4232] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Namespace="calico-system" Pod="goldmane-58fd7646b9-h48tl" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:06.958038 env[1202]: 2025-07-10 00:48:06.932 [INFO][4232] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali203b9d94aa6 ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Namespace="calico-system" Pod="goldmane-58fd7646b9-h48tl" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:06.958038 env[1202]: 2025-07-10 00:48:06.945 [INFO][4232] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Namespace="calico-system" Pod="goldmane-58fd7646b9-h48tl" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:06.958038 env[1202]: 2025-07-10 00:48:06.945 [INFO][4232] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Namespace="calico-system" Pod="goldmane-58fd7646b9-h48tl" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--h48tl-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89", ResourceVersion:"1092", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f", Pod:"goldmane-58fd7646b9-h48tl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali203b9d94aa6", MAC:"7e:ae:41:d8:83:e2", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:06.958038 env[1202]: 2025-07-10 00:48:06.954 [INFO][4232] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f" Namespace="calico-system" Pod="goldmane-58fd7646b9-h48tl" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:06.974728 env[1202]: time="2025-07-10T00:48:06.974645387Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:48:06.974900 env[1202]: time="2025-07-10T00:48:06.974686534Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:48:06.974900 env[1202]: time="2025-07-10T00:48:06.974696243Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:48:06.975031 env[1202]: time="2025-07-10T00:48:06.974920503Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f pid=4300 runtime=io.containerd.runc.v2 Jul 10 00:48:06.974000 audit[4301]: NETFILTER_CFG table=filter:117 family=2 entries=56 op=nft_register_chain pid=4301 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:06.974000 audit[4301]: SYSCALL arch=c000003e syscall=46 success=yes exit=28728 a0=3 a1=7fffd80710d0 a2=0 a3=7fffd80710bc items=0 ppid=3462 pid=4301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.974000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:06.988807 systemd[1]: Started cri-containerd-cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f.scope. Jul 10 00:48:06.994000 audit[4285]: USER_ACCT pid=4285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:06.995842 sshd[4285]: Accepted publickey for core from 10.0.0.1 port 53398 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:06.995000 audit[4285]: CRED_ACQ pid=4285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:06.995000 audit[4285]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc25d13a60 a2=3 a3=0 items=0 ppid=1 pid=4285 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.995000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:06.996596 sshd[4285]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:07.001109 systemd[1]: Started session-9.scope. Jul 10 00:48:07.001640 systemd-logind[1190]: New session 9 of user core. Jul 10 00:48:07.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit: BPF prog-id=193 op=LOAD Jul 10 00:48:07.005000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.005000 audit[4311]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4300 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366343939363039393931353037663766343862653561643465303462 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=4300 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366343939363039393931353037663766343862653561643465303462 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4285]: USER_START pid=4285 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit: BPF prog-id=194 op=LOAD Jul 10 00:48:07.006000 audit[4311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000219ef0 items=0 ppid=4300 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366343939363039393931353037663766343862653561643465303462 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit: BPF prog-id=195 op=LOAD Jul 10 00:48:07.006000 audit[4311]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000219f38 items=0 ppid=4300 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366343939363039393931353037663766343862653561643465303462 Jul 10 00:48:07.006000 audit: BPF prog-id=195 op=UNLOAD Jul 10 00:48:07.006000 audit: BPF prog-id=194 op=UNLOAD Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.006000 audit: BPF prog-id=196 op=LOAD Jul 10 00:48:07.006000 audit[4311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000422348 items=0 ppid=4300 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.006000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366343939363039393931353037663766343862653561643465303462 Jul 10 00:48:07.008000 audit[4329]: CRED_ACQ pid=4329 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:07.008530 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:48:07.032902 env[1202]: time="2025-07-10T00:48:07.032839176Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-h48tl,Uid:b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89,Namespace:calico-system,Attempt:1,} returns sandbox id \"cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f\"" Jul 10 00:48:07.039951 systemd-networkd[1019]: caliebdcb2277bc: Link UP Jul 10 00:48:07.042379 systemd-networkd[1019]: caliebdcb2277bc: Gained carrier Jul 10 00:48:07.042786 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliebdcb2277bc: link becomes ready Jul 10 00:48:07.055372 systemd-networkd[1019]: cali91f5794ad13: Gained IPv6LL Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:06.891 [INFO][4248] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--qlpnz-eth0 csi-node-driver- calico-system d5ed6e84-883c-4226-9ad8-831f6e16569a 1093 0 2025-07-10 00:47:42 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-qlpnz eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] caliebdcb2277bc [] [] }} ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Namespace="calico-system" Pod="csi-node-driver-qlpnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlpnz-" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:06.891 [INFO][4248] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Namespace="calico-system" Pod="csi-node-driver-qlpnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:06.932 [INFO][4271] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" HandleID="k8s-pod-network.6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:06.932 [INFO][4271] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" HandleID="k8s-pod-network.6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001a47b0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-qlpnz", "timestamp":"2025-07-10 00:48:06.932694045 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:06.933 [INFO][4271] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:06.933 [INFO][4271] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:06.933 [INFO][4271] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.008 [INFO][4271] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" host="localhost" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.013 [INFO][4271] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.016 [INFO][4271] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.018 [INFO][4271] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.020 [INFO][4271] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.020 [INFO][4271] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" host="localhost" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.021 [INFO][4271] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.025 [INFO][4271] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" host="localhost" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.031 [INFO][4271] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" host="localhost" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.031 [INFO][4271] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" host="localhost" Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.031 [INFO][4271] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:07.067074 env[1202]: 2025-07-10 00:48:07.031 [INFO][4271] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" HandleID="k8s-pod-network.6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:07.068403 env[1202]: 2025-07-10 00:48:07.034 [INFO][4248] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Namespace="calico-system" Pod="csi-node-driver-qlpnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlpnz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qlpnz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d5ed6e84-883c-4226-9ad8-831f6e16569a", ResourceVersion:"1093", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-qlpnz", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"caliebdcb2277bc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:07.068403 env[1202]: 2025-07-10 00:48:07.036 [INFO][4248] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Namespace="calico-system" Pod="csi-node-driver-qlpnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:07.068403 env[1202]: 2025-07-10 00:48:07.036 [INFO][4248] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliebdcb2277bc ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Namespace="calico-system" Pod="csi-node-driver-qlpnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:07.068403 env[1202]: 2025-07-10 00:48:07.040 [INFO][4248] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Namespace="calico-system" Pod="csi-node-driver-qlpnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:07.068403 env[1202]: 2025-07-10 00:48:07.043 [INFO][4248] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Namespace="calico-system" Pod="csi-node-driver-qlpnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlpnz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qlpnz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d5ed6e84-883c-4226-9ad8-831f6e16569a", ResourceVersion:"1093", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f", Pod:"csi-node-driver-qlpnz", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"caliebdcb2277bc", MAC:"82:3c:6d:17:3d:35", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:07.068403 env[1202]: 2025-07-10 00:48:07.064 [INFO][4248] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f" Namespace="calico-system" Pod="csi-node-driver-qlpnz" WorkloadEndpoint="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:07.077993 env[1202]: time="2025-07-10T00:48:07.077916651Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:48:07.078102 env[1202]: time="2025-07-10T00:48:07.077995710Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:48:07.078102 env[1202]: time="2025-07-10T00:48:07.078018713Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:48:07.078302 env[1202]: time="2025-07-10T00:48:07.078247672Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f pid=4359 runtime=io.containerd.runc.v2 Jul 10 00:48:07.084000 audit[4369]: NETFILTER_CFG table=filter:118 family=2 entries=52 op=nft_register_chain pid=4369 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:07.084000 audit[4369]: SYSCALL arch=c000003e syscall=46 success=yes exit=24312 a0=3 a1=7fffe1fa15c0 a2=0 a3=7fffe1fa15ac items=0 ppid=3462 pid=4369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.084000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:07.100406 systemd[1]: Started cri-containerd-6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f.scope. Jul 10 00:48:07.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.111000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.111000 audit: BPF prog-id=197 op=LOAD Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4359 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633303466363136623032393862656135376165613937653464396335 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4359 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633303466363136623032393862656135376165613937653464396335 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit: BPF prog-id=198 op=LOAD Jul 10 00:48:07.112000 audit[4372]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000296810 items=0 ppid=4359 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633303466363136623032393862656135376165613937653464396335 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit: BPF prog-id=199 op=LOAD Jul 10 00:48:07.112000 audit[4372]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000296858 items=0 ppid=4359 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633303466363136623032393862656135376165613937653464396335 Jul 10 00:48:07.112000 audit: BPF prog-id=199 op=UNLOAD Jul 10 00:48:07.112000 audit: BPF prog-id=198 op=UNLOAD Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { perfmon } for pid=4372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit[4372]: AVC avc: denied { bpf } for pid=4372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.112000 audit: BPF prog-id=200 op=LOAD Jul 10 00:48:07.112000 audit[4372]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000296c68 items=0 ppid=4359 pid=4372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.112000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633303466363136623032393862656135376165613937653464396335 Jul 10 00:48:07.113983 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:48:07.133503 env[1202]: time="2025-07-10T00:48:07.133449990Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qlpnz,Uid:d5ed6e84-883c-4226-9ad8-831f6e16569a,Namespace:calico-system,Attempt:1,} returns sandbox id \"6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f\"" Jul 10 00:48:07.169069 sshd[4285]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:07.169000 audit[4285]: USER_END pid=4285 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:07.169000 audit[4285]: CRED_DISP pid=4285 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:07.171930 systemd[1]: sshd@8-10.0.0.142:22-10.0.0.1:53398.service: Deactivated successfully. Jul 10 00:48:07.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.142:22-10.0.0.1:53398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:07.172731 systemd[1]: session-9.scope: Deactivated successfully. Jul 10 00:48:07.173290 systemd-logind[1190]: Session 9 logged out. Waiting for processes to exit. Jul 10 00:48:07.173993 systemd-logind[1190]: Removed session 9. Jul 10 00:48:07.178863 systemd-networkd[1019]: cali92bf9dbcbf7: Gained IPv6LL Jul 10 00:48:07.578008 env[1202]: time="2025-07-10T00:48:07.577961522Z" level=info msg="StopPodSandbox for \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\"" Jul 10 00:48:07.579395 env[1202]: time="2025-07-10T00:48:07.579362181Z" level=info msg="StopPodSandbox for \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\"" Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.714 [INFO][4424] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.714 [INFO][4424] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" iface="eth0" netns="/var/run/netns/cni-1338a10e-dd5b-339c-87f9-bb41875b9565" Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.714 [INFO][4424] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" iface="eth0" netns="/var/run/netns/cni-1338a10e-dd5b-339c-87f9-bb41875b9565" Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.714 [INFO][4424] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" iface="eth0" netns="/var/run/netns/cni-1338a10e-dd5b-339c-87f9-bb41875b9565" Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.714 [INFO][4424] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.714 [INFO][4424] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.744 [INFO][4437] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" HandleID="k8s-pod-network.d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.744 [INFO][4437] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.744 [INFO][4437] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.753 [WARNING][4437] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" HandleID="k8s-pod-network.d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.753 [INFO][4437] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" HandleID="k8s-pod-network.d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.754 [INFO][4437] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:07.758584 env[1202]: 2025-07-10 00:48:07.756 [INFO][4424] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:07.759304 env[1202]: time="2025-07-10T00:48:07.759253115Z" level=info msg="TearDown network for sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\" successfully" Jul 10 00:48:07.759304 env[1202]: time="2025-07-10T00:48:07.759288081Z" level=info msg="StopPodSandbox for \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\" returns successfully" Jul 10 00:48:07.759942 env[1202]: time="2025-07-10T00:48:07.759912794Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c6b46bdd-r7ps4,Uid:10193579-ce3e-4a12-b394-8f9d2869720e,Namespace:calico-system,Attempt:1,}" Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.743 [INFO][4429] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.743 [INFO][4429] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" iface="eth0" netns="/var/run/netns/cni-e8a5198a-c681-7b16-2e41-b4499971bcdd" Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.743 [INFO][4429] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" iface="eth0" netns="/var/run/netns/cni-e8a5198a-c681-7b16-2e41-b4499971bcdd" Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.744 [INFO][4429] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" iface="eth0" netns="/var/run/netns/cni-e8a5198a-c681-7b16-2e41-b4499971bcdd" Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.744 [INFO][4429] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.744 [INFO][4429] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.768 [INFO][4448] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" HandleID="k8s-pod-network.f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.768 [INFO][4448] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.768 [INFO][4448] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.777 [WARNING][4448] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" HandleID="k8s-pod-network.f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.777 [INFO][4448] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" HandleID="k8s-pod-network.f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.779 [INFO][4448] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:07.783157 env[1202]: 2025-07-10 00:48:07.781 [INFO][4429] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:07.783897 env[1202]: time="2025-07-10T00:48:07.783838922Z" level=info msg="TearDown network for sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\" successfully" Jul 10 00:48:07.784113 env[1202]: time="2025-07-10T00:48:07.784089272Z" level=info msg="StopPodSandbox for \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\" returns successfully" Jul 10 00:48:07.784928 env[1202]: time="2025-07-10T00:48:07.784889084Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f4f84749-ccnrs,Uid:2883d529-10fa-4514-a96f-6c1f5ac98c7c,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:48:07.790994 systemd[1]: run-netns-cni\x2d1338a10e\x2ddd5b\x2d339c\x2d87f9\x2dbb41875b9565.mount: Deactivated successfully. Jul 10 00:48:07.791073 systemd[1]: run-netns-cni\x2de8a5198a\x2dc681\x2d7b16\x2d2e41\x2db4499971bcdd.mount: Deactivated successfully. Jul 10 00:48:07.795853 kubelet[1944]: E0710 00:48:07.795829 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:07.873436 env[1202]: time="2025-07-10T00:48:07.872514715Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:07.876045 env[1202]: time="2025-07-10T00:48:07.876001593Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:07.878775 env[1202]: time="2025-07-10T00:48:07.878748160Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:07.883517 systemd-networkd[1019]: calic70242745e0: Link UP Jul 10 00:48:07.885458 systemd-networkd[1019]: calic70242745e0: Gained carrier Jul 10 00:48:07.885735 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic70242745e0: link becomes ready Jul 10 00:48:07.885795 env[1202]: time="2025-07-10T00:48:07.885692019Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:07.886801 env[1202]: time="2025-07-10T00:48:07.886774622Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 00:48:07.889470 env[1202]: time="2025-07-10T00:48:07.889442882Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 10 00:48:07.890556 env[1202]: time="2025-07-10T00:48:07.890529232Z" level=info msg="CreateContainer within sandbox \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.816 [INFO][4457] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0 calico-kube-controllers-7c6b46bdd- calico-system 10193579-ce3e-4a12-b394-8f9d2869720e 1117 0 2025-07-10 00:47:42 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7c6b46bdd projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7c6b46bdd-r7ps4 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calic70242745e0 [] [] }} ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Namespace="calico-system" Pod="calico-kube-controllers-7c6b46bdd-r7ps4" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.816 [INFO][4457] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Namespace="calico-system" Pod="calico-kube-controllers-7c6b46bdd-r7ps4" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.850 [INFO][4483] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" HandleID="k8s-pod-network.37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.850 [INFO][4483] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" HandleID="k8s-pod-network.37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002df2e0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7c6b46bdd-r7ps4", "timestamp":"2025-07-10 00:48:07.850156531 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.850 [INFO][4483] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.850 [INFO][4483] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.850 [INFO][4483] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.856 [INFO][4483] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" host="localhost" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.860 [INFO][4483] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.863 [INFO][4483] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.864 [INFO][4483] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.866 [INFO][4483] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.866 [INFO][4483] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" host="localhost" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.868 [INFO][4483] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.871 [INFO][4483] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" host="localhost" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.877 [INFO][4483] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" host="localhost" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.877 [INFO][4483] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" host="localhost" Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.877 [INFO][4483] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:07.899966 env[1202]: 2025-07-10 00:48:07.878 [INFO][4483] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" HandleID="k8s-pod-network.37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:07.900612 env[1202]: 2025-07-10 00:48:07.880 [INFO][4457] cni-plugin/k8s.go 418: Populated endpoint ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Namespace="calico-system" Pod="calico-kube-controllers-7c6b46bdd-r7ps4" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0", GenerateName:"calico-kube-controllers-7c6b46bdd-", Namespace:"calico-system", SelfLink:"", UID:"10193579-ce3e-4a12-b394-8f9d2869720e", ResourceVersion:"1117", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c6b46bdd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7c6b46bdd-r7ps4", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic70242745e0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:07.900612 env[1202]: 2025-07-10 00:48:07.880 [INFO][4457] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Namespace="calico-system" Pod="calico-kube-controllers-7c6b46bdd-r7ps4" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:07.900612 env[1202]: 2025-07-10 00:48:07.880 [INFO][4457] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic70242745e0 ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Namespace="calico-system" Pod="calico-kube-controllers-7c6b46bdd-r7ps4" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:07.900612 env[1202]: 2025-07-10 00:48:07.886 [INFO][4457] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Namespace="calico-system" Pod="calico-kube-controllers-7c6b46bdd-r7ps4" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:07.900612 env[1202]: 2025-07-10 00:48:07.887 [INFO][4457] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Namespace="calico-system" Pod="calico-kube-controllers-7c6b46bdd-r7ps4" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0", GenerateName:"calico-kube-controllers-7c6b46bdd-", Namespace:"calico-system", SelfLink:"", UID:"10193579-ce3e-4a12-b394-8f9d2869720e", ResourceVersion:"1117", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c6b46bdd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb", Pod:"calico-kube-controllers-7c6b46bdd-r7ps4", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic70242745e0", MAC:"c2:2f:e4:22:55:94", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:07.900612 env[1202]: 2025-07-10 00:48:07.898 [INFO][4457] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb" Namespace="calico-system" Pod="calico-kube-controllers-7c6b46bdd-r7ps4" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:07.910016 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2160292272.mount: Deactivated successfully. Jul 10 00:48:07.916000 audit[4514]: NETFILTER_CFG table=filter:119 family=2 entries=56 op=nft_register_chain pid=4514 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:07.916000 audit[4514]: SYSCALL arch=c000003e syscall=46 success=yes exit=25500 a0=3 a1=7fffa2df5c80 a2=0 a3=7fffa2df5c6c items=0 ppid=3462 pid=4514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.916000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:07.918921 env[1202]: time="2025-07-10T00:48:07.918877774Z" level=info msg="CreateContainer within sandbox \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\"" Jul 10 00:48:07.919679 env[1202]: time="2025-07-10T00:48:07.919638833Z" level=info msg="StartContainer for \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\"" Jul 10 00:48:07.920230 env[1202]: time="2025-07-10T00:48:07.920168618Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:48:07.920457 env[1202]: time="2025-07-10T00:48:07.920406715Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:48:07.920554 env[1202]: time="2025-07-10T00:48:07.920529215Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:48:07.920808 env[1202]: time="2025-07-10T00:48:07.920772512Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb pid=4523 runtime=io.containerd.runc.v2 Jul 10 00:48:07.930548 systemd[1]: Started cri-containerd-37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb.scope. Jul 10 00:48:07.939816 systemd[1]: Started cri-containerd-8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c.scope. Jul 10 00:48:07.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.942000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.942000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.942000 audit: BPF prog-id=201 op=LOAD Jul 10 00:48:07.943000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.943000 audit[4533]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4523 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337626332333766383764653835613464626434616235303537373463 Jul 10 00:48:07.943000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.943000 audit[4533]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4523 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.943000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337626332333766383764653835613464626434616235303537373463 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit: BPF prog-id=202 op=LOAD Jul 10 00:48:07.944000 audit[4533]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002174b0 items=0 ppid=4523 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337626332333766383764653835613464626434616235303537373463 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.944000 audit: BPF prog-id=203 op=LOAD Jul 10 00:48:07.944000 audit[4533]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002174f8 items=0 ppid=4523 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337626332333766383764653835613464626434616235303537373463 Jul 10 00:48:07.945000 audit: BPF prog-id=203 op=UNLOAD Jul 10 00:48:07.945000 audit: BPF prog-id=202 op=UNLOAD Jul 10 00:48:07.945000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.945000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.945000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.945000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.945000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.945000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.945000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.945000 audit[4533]: AVC avc: denied { perfmon } for pid=4533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.945000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.945000 audit[4533]: AVC avc: denied { bpf } for pid=4533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.945000 audit: BPF prog-id=204 op=LOAD Jul 10 00:48:07.945000 audit[4533]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000217908 items=0 ppid=4523 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3337626332333766383764653835613464626434616235303537373463 Jul 10 00:48:07.947637 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:48:07.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit: BPF prog-id=205 op=LOAD Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3763 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838363063313530633831333261663561323663613335363063336135 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3763 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838363063313530633831333261663561323663613335363063336135 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit: BPF prog-id=206 op=LOAD Jul 10 00:48:07.953000 audit[4548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001ecd00 items=0 ppid=3763 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838363063313530633831333261663561323663613335363063336135 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit: BPF prog-id=207 op=LOAD Jul 10 00:48:07.953000 audit[4548]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001ecd48 items=0 ppid=3763 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838363063313530633831333261663561323663613335363063336135 Jul 10 00:48:07.953000 audit: BPF prog-id=207 op=UNLOAD Jul 10 00:48:07.953000 audit: BPF prog-id=206 op=UNLOAD Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:07.953000 audit: BPF prog-id=208 op=LOAD Jul 10 00:48:07.953000 audit[4548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0001ed158 items=0 ppid=3763 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:07.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838363063313530633831333261663561323663613335363063336135 Jul 10 00:48:07.977588 env[1202]: time="2025-07-10T00:48:07.977516344Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7c6b46bdd-r7ps4,Uid:10193579-ce3e-4a12-b394-8f9d2869720e,Namespace:calico-system,Attempt:1,} returns sandbox id \"37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb\"" Jul 10 00:48:07.986562 env[1202]: time="2025-07-10T00:48:07.986521253Z" level=info msg="StartContainer for \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\" returns successfully" Jul 10 00:48:08.010024 systemd-networkd[1019]: cali52fe2fd730f: Link UP Jul 10 00:48:08.013175 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:48:08.013237 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali52fe2fd730f: link becomes ready Jul 10 00:48:08.013336 systemd-networkd[1019]: cali52fe2fd730f: Gained carrier Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.846 [INFO][4470] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0 calico-apiserver-6f4f84749- calico-apiserver 2883d529-10fa-4514-a96f-6c1f5ac98c7c 1118 0 2025-07-10 00:47:39 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6f4f84749 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6f4f84749-ccnrs eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali52fe2fd730f [] [] }} ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-ccnrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.846 [INFO][4470] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-ccnrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.902 [INFO][4495] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" HandleID="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.902 [INFO][4495] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" HandleID="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00033a260), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6f4f84749-ccnrs", "timestamp":"2025-07-10 00:48:07.902451239 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.902 [INFO][4495] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.905 [INFO][4495] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.905 [INFO][4495] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.960 [INFO][4495] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" host="localhost" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.969 [INFO][4495] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.973 [INFO][4495] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.975 [INFO][4495] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.976 [INFO][4495] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.976 [INFO][4495] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" host="localhost" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.978 [INFO][4495] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:07.984 [INFO][4495] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" host="localhost" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:08.001 [INFO][4495] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" host="localhost" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:08.001 [INFO][4495] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" host="localhost" Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:08.001 [INFO][4495] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:08.027034 env[1202]: 2025-07-10 00:48:08.001 [INFO][4495] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" HandleID="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:08.027687 env[1202]: 2025-07-10 00:48:08.007 [INFO][4470] cni-plugin/k8s.go 418: Populated endpoint ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-ccnrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0", GenerateName:"calico-apiserver-6f4f84749-", Namespace:"calico-apiserver", SelfLink:"", UID:"2883d529-10fa-4514-a96f-6c1f5ac98c7c", ResourceVersion:"1118", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f4f84749", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6f4f84749-ccnrs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali52fe2fd730f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:08.027687 env[1202]: 2025-07-10 00:48:08.008 [INFO][4470] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-ccnrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:08.027687 env[1202]: 2025-07-10 00:48:08.008 [INFO][4470] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali52fe2fd730f ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-ccnrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:08.027687 env[1202]: 2025-07-10 00:48:08.014 [INFO][4470] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-ccnrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:08.027687 env[1202]: 2025-07-10 00:48:08.014 [INFO][4470] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-ccnrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0", GenerateName:"calico-apiserver-6f4f84749-", Namespace:"calico-apiserver", SelfLink:"", UID:"2883d529-10fa-4514-a96f-6c1f5ac98c7c", ResourceVersion:"1118", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f4f84749", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa", Pod:"calico-apiserver-6f4f84749-ccnrs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali52fe2fd730f", MAC:"c2:33:73:9b:e6:30", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:08.027687 env[1202]: 2025-07-10 00:48:08.024 [INFO][4470] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Namespace="calico-apiserver" Pod="calico-apiserver-6f4f84749-ccnrs" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:08.039515 env[1202]: time="2025-07-10T00:48:08.039445477Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:48:08.039622 env[1202]: time="2025-07-10T00:48:08.039518874Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:48:08.039622 env[1202]: time="2025-07-10T00:48:08.039531468Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:48:08.038000 audit[4609]: NETFILTER_CFG table=filter:120 family=2 entries=61 op=nft_register_chain pid=4609 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:08.038000 audit[4609]: SYSCALL arch=c000003e syscall=46 success=yes exit=29000 a0=3 a1=7ffde57d7310 a2=0 a3=7ffde57d72fc items=0 ppid=3462 pid=4609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.038000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:08.039876 env[1202]: time="2025-07-10T00:48:08.039662234Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa pid=4610 runtime=io.containerd.runc.v2 Jul 10 00:48:08.050821 systemd[1]: Started cri-containerd-008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa.scope. Jul 10 00:48:08.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.061000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.061000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit: BPF prog-id=209 op=LOAD Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4610 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030383039356664326430366366373466656534336436343765323432 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4610 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030383039356664326430366366373466656534336436343765323432 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit: BPF prog-id=210 op=LOAD Jul 10 00:48:08.062000 audit[4620]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000388730 items=0 ppid=4610 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030383039356664326430366366373466656534336436343765323432 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit: BPF prog-id=211 op=LOAD Jul 10 00:48:08.062000 audit[4620]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000388778 items=0 ppid=4610 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030383039356664326430366366373466656534336436343765323432 Jul 10 00:48:08.062000 audit: BPF prog-id=211 op=UNLOAD Jul 10 00:48:08.064059 systemd-resolved[1142]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:48:08.062000 audit: BPF prog-id=210 op=UNLOAD Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { perfmon } for pid=4620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit[4620]: AVC avc: denied { bpf } for pid=4620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.062000 audit: BPF prog-id=212 op=LOAD Jul 10 00:48:08.062000 audit[4620]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000388b88 items=0 ppid=4610 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.062000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030383039356664326430366366373466656534336436343765323432 Jul 10 00:48:08.086386 env[1202]: time="2025-07-10T00:48:08.086344806Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6f4f84749-ccnrs,Uid:2883d529-10fa-4514-a96f-6c1f5ac98c7c,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa\"" Jul 10 00:48:08.088622 env[1202]: time="2025-07-10T00:48:08.088601754Z" level=info msg="CreateContainer within sandbox \"008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:48:08.101173 env[1202]: time="2025-07-10T00:48:08.101145696Z" level=info msg="CreateContainer within sandbox \"008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\"" Jul 10 00:48:08.101638 env[1202]: time="2025-07-10T00:48:08.101599989Z" level=info msg="StartContainer for \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\"" Jul 10 00:48:08.116775 systemd[1]: Started cri-containerd-436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef.scope. Jul 10 00:48:08.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.132000 audit: BPF prog-id=213 op=LOAD Jul 10 00:48:08.133000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.133000 audit[4655]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4610 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433366465333438393434393665666437356562373736393833623036 Jul 10 00:48:08.133000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.133000 audit[4655]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4610 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433366465333438393434393665666437356562373736393833623036 Jul 10 00:48:08.134000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.134000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.134000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.134000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.134000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.134000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.134000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.134000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.134000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.134000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.134000 audit: BPF prog-id=214 op=LOAD Jul 10 00:48:08.134000 audit[4655]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000259b80 items=0 ppid=4610 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.134000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433366465333438393434393665666437356562373736393833623036 Jul 10 00:48:08.135000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.135000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.135000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.135000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.135000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.135000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.135000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.135000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.135000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.135000 audit: BPF prog-id=215 op=LOAD Jul 10 00:48:08.135000 audit[4655]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000259bc8 items=0 ppid=4610 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433366465333438393434393665666437356562373736393833623036 Jul 10 00:48:08.135000 audit: BPF prog-id=215 op=UNLOAD Jul 10 00:48:08.135000 audit: BPF prog-id=214 op=UNLOAD Jul 10 00:48:08.136000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.136000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.136000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.136000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.136000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.136000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.136000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.136000 audit[4655]: AVC avc: denied { perfmon } for pid=4655 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.136000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.136000 audit[4655]: AVC avc: denied { bpf } for pid=4655 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:08.136000 audit: BPF prog-id=216 op=LOAD Jul 10 00:48:08.136000 audit[4655]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000259fd8 items=0 ppid=4610 pid=4655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.136000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433366465333438393434393665666437356562373736393833623036 Jul 10 00:48:08.244155 env[1202]: time="2025-07-10T00:48:08.244097025Z" level=info msg="StartContainer for \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\" returns successfully" Jul 10 00:48:08.269855 systemd-networkd[1019]: cali203b9d94aa6: Gained IPv6LL Jul 10 00:48:08.802983 kubelet[1944]: E0710 00:48:08.802938 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:08.818489 kubelet[1944]: I0710 00:48:08.818375 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6f4f84749-ccnrs" podStartSLOduration=29.818346177 podStartE2EDuration="29.818346177s" podCreationTimestamp="2025-07-10 00:47:39 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:48:08.809967966 +0000 UTC m=+45.317110521" watchObservedRunningTime="2025-07-10 00:48:08.818346177 +0000 UTC m=+45.325488732" Jul 10 00:48:08.819031 kubelet[1944]: I0710 00:48:08.819002 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6f4f84749-bc2qs" podStartSLOduration=26.238513956 podStartE2EDuration="29.818995636s" podCreationTimestamp="2025-07-10 00:47:39 +0000 UTC" firstStartedPulling="2025-07-10 00:48:04.307507673 +0000 UTC m=+40.814650228" lastFinishedPulling="2025-07-10 00:48:07.887989353 +0000 UTC m=+44.395131908" observedRunningTime="2025-07-10 00:48:08.817876736 +0000 UTC m=+45.325019291" watchObservedRunningTime="2025-07-10 00:48:08.818995636 +0000 UTC m=+45.326138191" Jul 10 00:48:08.826000 audit[4689]: NETFILTER_CFG table=filter:121 family=2 entries=14 op=nft_register_rule pid=4689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:08.826000 audit[4689]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc6bf28640 a2=0 a3=7ffc6bf2862c items=0 ppid=2051 pid=4689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.826000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:08.833000 audit[4689]: NETFILTER_CFG table=nat:122 family=2 entries=20 op=nft_register_rule pid=4689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:08.833000 audit[4689]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc6bf28640 a2=0 a3=7ffc6bf2862c items=0 ppid=2051 pid=4689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.833000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:08.849000 audit[4691]: NETFILTER_CFG table=filter:123 family=2 entries=14 op=nft_register_rule pid=4691 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:08.849000 audit[4691]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdb4ecd170 a2=0 a3=7ffdb4ecd15c items=0 ppid=2051 pid=4691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.849000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:08.853000 audit[4691]: NETFILTER_CFG table=nat:124 family=2 entries=20 op=nft_register_rule pid=4691 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:08.853000 audit[4691]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffdb4ecd170 a2=0 a3=7ffdb4ecd15c items=0 ppid=2051 pid=4691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:08.853000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:09.045000 audit[4666]: AVC avc: denied { watch } for pid=4666 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_47_51.2852553905/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c820,c903 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c820,c903 tclass=file permissive=0 Jul 10 00:48:09.045000 audit[4666]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000eeabc0 a2=fc6 a3=0 items=0 ppid=4610 pid=4666 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c820,c903 key=(null) Jul 10 00:48:09.045000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:48:09.099865 systemd-networkd[1019]: caliebdcb2277bc: Gained IPv6LL Jul 10 00:48:09.356000 audit[4566]: AVC avc: denied { watch } for pid=4566 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_47_51.3997188962/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c669,c694 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c669,c694 tclass=file permissive=0 Jul 10 00:48:09.356000 audit[4566]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0015c0640 a2=fc6 a3=0 items=0 ppid=3763 pid=4566 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c669,c694 key=(null) Jul 10 00:48:09.356000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:48:09.738949 systemd-networkd[1019]: calic70242745e0: Gained IPv6LL Jul 10 00:48:09.739260 systemd-networkd[1019]: cali52fe2fd730f: Gained IPv6LL Jul 10 00:48:09.805739 kubelet[1944]: I0710 00:48:09.805141 1944 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:48:09.869000 audit[4699]: NETFILTER_CFG table=filter:125 family=2 entries=13 op=nft_register_rule pid=4699 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:09.869000 audit[4699]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe5431ecb0 a2=0 a3=7ffe5431ec9c items=0 ppid=2051 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:09.869000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:09.876000 audit[4699]: NETFILTER_CFG table=nat:126 family=2 entries=27 op=nft_register_chain pid=4699 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:09.876000 audit[4699]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffe5431ecb0 a2=0 a3=7ffe5431ec9c items=0 ppid=2051 pid=4699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:09.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:10.435207 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount966050611.mount: Deactivated successfully. Jul 10 00:48:10.564026 env[1202]: time="2025-07-10T00:48:10.563967766Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:10.565770 env[1202]: time="2025-07-10T00:48:10.565741817Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:10.567338 env[1202]: time="2025-07-10T00:48:10.567296716Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:10.568950 env[1202]: time="2025-07-10T00:48:10.568901098Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:10.569371 env[1202]: time="2025-07-10T00:48:10.569334812Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 10 00:48:10.570817 env[1202]: time="2025-07-10T00:48:10.570756120Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:48:10.571929 env[1202]: time="2025-07-10T00:48:10.571895439Z" level=info msg="CreateContainer within sandbox \"7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 10 00:48:10.588273 env[1202]: time="2025-07-10T00:48:10.588228252Z" level=info msg="CreateContainer within sandbox \"7af20df6b5ce6fbc77592c474597c32dd1df40a91e2fa4390b6ee45019734e85\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"bbae0095eba29b66d73be73ab6902dfa421982c37368fa48173f466c83b24526\"" Jul 10 00:48:10.589030 env[1202]: time="2025-07-10T00:48:10.588870708Z" level=info msg="StartContainer for \"bbae0095eba29b66d73be73ab6902dfa421982c37368fa48173f466c83b24526\"" Jul 10 00:48:10.607516 systemd[1]: Started cri-containerd-bbae0095eba29b66d73be73ab6902dfa421982c37368fa48173f466c83b24526.scope. Jul 10 00:48:10.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.617000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.617000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit: BPF prog-id=217 op=LOAD Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=3383 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:10.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262616530303935656261323962363664373362653733616236393032 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=3383 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:10.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262616530303935656261323962363664373362653733616236393032 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit: BPF prog-id=218 op=LOAD Jul 10 00:48:10.618000 audit[4708]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0000ac370 items=0 ppid=3383 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:10.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262616530303935656261323962363664373362653733616236393032 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit: BPF prog-id=219 op=LOAD Jul 10 00:48:10.618000 audit[4708]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0000ac3b8 items=0 ppid=3383 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:10.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262616530303935656261323962363664373362653733616236393032 Jul 10 00:48:10.618000 audit: BPF prog-id=219 op=UNLOAD Jul 10 00:48:10.618000 audit: BPF prog-id=218 op=UNLOAD Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { perfmon } for pid=4708 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit[4708]: AVC avc: denied { bpf } for pid=4708 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:10.618000 audit: BPF prog-id=220 op=LOAD Jul 10 00:48:10.618000 audit[4708]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c0000ac7c8 items=0 ppid=3383 pid=4708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:10.618000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262616530303935656261323962363664373362653733616236393032 Jul 10 00:48:10.644945 env[1202]: time="2025-07-10T00:48:10.644905595Z" level=info msg="StartContainer for \"bbae0095eba29b66d73be73ab6902dfa421982c37368fa48173f466c83b24526\" returns successfully" Jul 10 00:48:10.900350 kubelet[1944]: I0710 00:48:10.900281 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-699d7d46d6-hkhfh" podStartSLOduration=1.6780055090000001 podStartE2EDuration="8.900260795s" podCreationTimestamp="2025-07-10 00:48:02 +0000 UTC" firstStartedPulling="2025-07-10 00:48:03.348016385 +0000 UTC m=+39.855158940" lastFinishedPulling="2025-07-10 00:48:10.570271671 +0000 UTC m=+47.077414226" observedRunningTime="2025-07-10 00:48:10.899367398 +0000 UTC m=+47.406509973" watchObservedRunningTime="2025-07-10 00:48:10.900260795 +0000 UTC m=+47.407403350" Jul 10 00:48:11.068000 audit[4740]: NETFILTER_CFG table=filter:127 family=2 entries=11 op=nft_register_rule pid=4740 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:11.070747 kernel: kauditd_printk_skb: 628 callbacks suppressed Jul 10 00:48:11.070822 kernel: audit: type=1325 audit(1752108491.068:1424): table=filter:127 family=2 entries=11 op=nft_register_rule pid=4740 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:11.072907 env[1202]: time="2025-07-10T00:48:11.072856367Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:11.068000 audit[4740]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc3123b3e0 a2=0 a3=7ffc3123b3cc items=0 ppid=2051 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.074684 env[1202]: time="2025-07-10T00:48:11.074027626Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:11.075925 env[1202]: time="2025-07-10T00:48:11.075879813Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:11.077343 env[1202]: time="2025-07-10T00:48:11.077314005Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:11.077780 env[1202]: time="2025-07-10T00:48:11.077753059Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 00:48:11.078519 kernel: audit: type=1300 audit(1752108491.068:1424): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc3123b3e0 a2=0 a3=7ffc3123b3cc items=0 ppid=2051 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.078560 kernel: audit: type=1327 audit(1752108491.068:1424): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:11.068000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:11.079328 env[1202]: time="2025-07-10T00:48:11.079302107Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 10 00:48:11.080186 env[1202]: time="2025-07-10T00:48:11.080157182Z" level=info msg="CreateContainer within sandbox \"8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:48:11.081000 audit[4740]: NETFILTER_CFG table=nat:128 family=2 entries=29 op=nft_register_chain pid=4740 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:11.081000 audit[4740]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffc3123b3e0 a2=0 a3=7ffc3123b3cc items=0 ppid=2051 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.091597 kernel: audit: type=1325 audit(1752108491.081:1425): table=nat:128 family=2 entries=29 op=nft_register_chain pid=4740 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:11.091736 kernel: audit: type=1300 audit(1752108491.081:1425): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffc3123b3e0 a2=0 a3=7ffc3123b3cc items=0 ppid=2051 pid=4740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.091764 kernel: audit: type=1327 audit(1752108491.081:1425): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:11.081000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:11.099822 env[1202]: time="2025-07-10T00:48:11.099771183Z" level=info msg="CreateContainer within sandbox \"8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"f3309e3f4984ac79ac4804928966ed45751fcca8ba84146a3c0d7f8d81946aef\"" Jul 10 00:48:11.100299 env[1202]: time="2025-07-10T00:48:11.100249541Z" level=info msg="StartContainer for \"f3309e3f4984ac79ac4804928966ed45751fcca8ba84146a3c0d7f8d81946aef\"" Jul 10 00:48:11.114875 systemd[1]: Started cri-containerd-f3309e3f4984ac79ac4804928966ed45751fcca8ba84146a3c0d7f8d81946aef.scope. Jul 10 00:48:11.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133839 kernel: audit: type=1400 audit(1752108491.127:1426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133888 kernel: audit: type=1400 audit(1752108491.127:1427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133918 kernel: audit: type=1400 audit(1752108491.127:1428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.139533 kernel: audit: type=1400 audit(1752108491.127:1429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.127000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.127000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit: BPF prog-id=221 op=LOAD Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4115 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633333039653366343938346163373961633438303439323839363665 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4115 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633333039653366343938346163373961633438303439323839363665 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.133000 audit: BPF prog-id=222 op=LOAD Jul 10 00:48:11.133000 audit[4748]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001cc3b0 items=0 ppid=4115 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.133000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633333039653366343938346163373961633438303439323839363665 Jul 10 00:48:11.135000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.135000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.135000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.135000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.135000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.135000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.135000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.135000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.135000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.135000 audit: BPF prog-id=223 op=LOAD Jul 10 00:48:11.135000 audit[4748]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001cc3f8 items=0 ppid=4115 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633333039653366343938346163373961633438303439323839363665 Jul 10 00:48:11.138000 audit: BPF prog-id=223 op=UNLOAD Jul 10 00:48:11.138000 audit: BPF prog-id=222 op=UNLOAD Jul 10 00:48:11.138000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.138000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.138000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.138000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.138000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.138000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.138000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.138000 audit[4748]: AVC avc: denied { perfmon } for pid=4748 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.138000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.138000 audit[4748]: AVC avc: denied { bpf } for pid=4748 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:11.138000 audit: BPF prog-id=224 op=LOAD Jul 10 00:48:11.138000 audit[4748]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001cc808 items=0 ppid=4115 pid=4748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633333039653366343938346163373961633438303439323839363665 Jul 10 00:48:11.319072 env[1202]: time="2025-07-10T00:48:11.318983763Z" level=info msg="StartContainer for \"f3309e3f4984ac79ac4804928966ed45751fcca8ba84146a3c0d7f8d81946aef\" returns successfully" Jul 10 00:48:11.822802 kubelet[1944]: I0710 00:48:11.822726 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-67c56776df-9wrhd" podStartSLOduration=26.719102622 podStartE2EDuration="31.822691094s" podCreationTimestamp="2025-07-10 00:47:40 +0000 UTC" firstStartedPulling="2025-07-10 00:48:05.975065448 +0000 UTC m=+42.482207993" lastFinishedPulling="2025-07-10 00:48:11.07865384 +0000 UTC m=+47.585796465" observedRunningTime="2025-07-10 00:48:11.822322492 +0000 UTC m=+48.329465047" watchObservedRunningTime="2025-07-10 00:48:11.822691094 +0000 UTC m=+48.329833659" Jul 10 00:48:11.833000 audit[4782]: NETFILTER_CFG table=filter:129 family=2 entries=10 op=nft_register_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:11.833000 audit[4782]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe144a5f80 a2=0 a3=7ffe144a5f6c items=0 ppid=2051 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.833000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:11.842000 audit[4782]: NETFILTER_CFG table=nat:130 family=2 entries=32 op=nft_register_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:11.842000 audit[4782]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffe144a5f80 a2=0 a3=7ffe144a5f6c items=0 ppid=2051 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.842000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:12.047000 audit[4759]: AVC avc: denied { watch } for pid=4759 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_47_51.3444821033/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c151,c759 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c151,c759 tclass=file permissive=0 Jul 10 00:48:12.047000 audit[4759]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00036f780 a2=fc6 a3=0 items=0 ppid=4115 pid=4759 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c151,c759 key=(null) Jul 10 00:48:12.047000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:48:12.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.142:22-10.0.0.1:53850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:12.174376 systemd[1]: Started sshd@9-10.0.0.142:22-10.0.0.1:53850.service. Jul 10 00:48:12.214000 audit[4784]: USER_ACCT pid=4784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.215367 sshd[4784]: Accepted publickey for core from 10.0.0.1 port 53850 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:12.215000 audit[4784]: CRED_ACQ pid=4784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.215000 audit[4784]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd438664f0 a2=3 a3=0 items=0 ppid=1 pid=4784 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:12.215000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:12.216462 sshd[4784]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:12.219988 systemd-logind[1190]: New session 10 of user core. Jul 10 00:48:12.220866 systemd[1]: Started session-10.scope. Jul 10 00:48:12.223000 audit[4784]: USER_START pid=4784 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.225000 audit[4786]: CRED_ACQ pid=4786 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.526344 sshd[4784]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:12.527000 audit[4784]: USER_END pid=4784 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.527000 audit[4784]: CRED_DISP pid=4784 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.530030 systemd[1]: sshd@9-10.0.0.142:22-10.0.0.1:53850.service: Deactivated successfully. Jul 10 00:48:12.530655 systemd[1]: session-10.scope: Deactivated successfully. Jul 10 00:48:12.529000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.142:22-10.0.0.1:53850 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:12.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.142:22-10.0.0.1:53860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:12.533815 systemd[1]: Started sshd@10-10.0.0.142:22-10.0.0.1:53860.service. Jul 10 00:48:12.534388 systemd-logind[1190]: Session 10 logged out. Waiting for processes to exit. Jul 10 00:48:12.535961 systemd-logind[1190]: Removed session 10. Jul 10 00:48:12.569000 audit[4800]: USER_ACCT pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.570984 sshd[4800]: Accepted publickey for core from 10.0.0.1 port 53860 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:12.570000 audit[4800]: CRED_ACQ pid=4800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.570000 audit[4800]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc856339a0 a2=3 a3=0 items=0 ppid=1 pid=4800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:12.570000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:12.571789 sshd[4800]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:12.575846 systemd-logind[1190]: New session 11 of user core. Jul 10 00:48:12.576607 systemd[1]: Started session-11.scope. Jul 10 00:48:12.581000 audit[4800]: USER_START pid=4800 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.583000 audit[4802]: CRED_ACQ pid=4802 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.751891 sshd[4800]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:12.756593 systemd[1]: Started sshd@11-10.0.0.142:22-10.0.0.1:53874.service. Jul 10 00:48:12.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.142:22-10.0.0.1:53874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:12.757000 audit[4800]: USER_END pid=4800 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.757000 audit[4800]: CRED_DISP pid=4800 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.760360 systemd[1]: sshd@10-10.0.0.142:22-10.0.0.1:53860.service: Deactivated successfully. Jul 10 00:48:12.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.142:22-10.0.0.1:53860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:12.761093 systemd[1]: session-11.scope: Deactivated successfully. Jul 10 00:48:12.762114 systemd-logind[1190]: Session 11 logged out. Waiting for processes to exit. Jul 10 00:48:12.765223 systemd-logind[1190]: Removed session 11. Jul 10 00:48:12.797000 audit[4811]: USER_ACCT pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.798968 sshd[4811]: Accepted publickey for core from 10.0.0.1 port 53874 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:12.798000 audit[4811]: CRED_ACQ pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.799000 audit[4811]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff769a50a0 a2=3 a3=0 items=0 ppid=1 pid=4811 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:12.799000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:12.800080 sshd[4811]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:12.804284 systemd-logind[1190]: New session 12 of user core. Jul 10 00:48:12.805222 systemd[1]: Started session-12.scope. Jul 10 00:48:12.808000 audit[4811]: USER_START pid=4811 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.810000 audit[4814]: CRED_ACQ pid=4814 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:12.842000 audit[4816]: NETFILTER_CFG table=filter:131 family=2 entries=10 op=nft_register_rule pid=4816 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:12.842000 audit[4816]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffea1253d90 a2=0 a3=7ffea1253d7c items=0 ppid=2051 pid=4816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:12.842000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:12.848000 audit[4816]: NETFILTER_CFG table=nat:132 family=2 entries=36 op=nft_register_chain pid=4816 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:12.850510 kubelet[1944]: I0710 00:48:12.849995 1944 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:48:12.850990 env[1202]: time="2025-07-10T00:48:12.850788222Z" level=info msg="StopContainer for \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\" with timeout 30 (s)" Jul 10 00:48:12.851500 env[1202]: time="2025-07-10T00:48:12.851467837Z" level=info msg="Stop container \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\" with signal terminated" Jul 10 00:48:12.848000 audit[4816]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffea1253d90 a2=0 a3=7ffea1253d7c items=0 ppid=2051 pid=4816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:12.848000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:12.873578 systemd[1]: cri-containerd-8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c.scope: Deactivated successfully. Jul 10 00:48:12.873000 audit: BPF prog-id=205 op=UNLOAD Jul 10 00:48:12.873966 systemd[1]: cri-containerd-8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c.scope: Consumed 1.036s CPU time. Jul 10 00:48:12.877000 audit: BPF prog-id=208 op=UNLOAD Jul 10 00:48:12.904797 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c-rootfs.mount: Deactivated successfully. Jul 10 00:48:13.040842 env[1202]: time="2025-07-10T00:48:13.040793026Z" level=info msg="shim disconnected" id=8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c Jul 10 00:48:13.041165 env[1202]: time="2025-07-10T00:48:13.041073723Z" level=warning msg="cleaning up after shim disconnected" id=8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c namespace=k8s.io Jul 10 00:48:13.041165 env[1202]: time="2025-07-10T00:48:13.041103669Z" level=info msg="cleaning up dead shim" Jul 10 00:48:13.051702 env[1202]: time="2025-07-10T00:48:13.050694631Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:48:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4845 runtime=io.containerd.runc.v2\n" Jul 10 00:48:13.051128 sshd[4811]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:13.051000 audit[4811]: USER_END pid=4811 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:13.052000 audit[4811]: CRED_DISP pid=4811 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:13.054004 env[1202]: time="2025-07-10T00:48:13.053836820Z" level=info msg="StopContainer for \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\" returns successfully" Jul 10 00:48:13.054326 systemd[1]: sshd@11-10.0.0.142:22-10.0.0.1:53874.service: Deactivated successfully. Jul 10 00:48:13.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.142:22-10.0.0.1:53874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:13.054719 env[1202]: time="2025-07-10T00:48:13.054457775Z" level=info msg="StopPodSandbox for \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\"" Jul 10 00:48:13.054719 env[1202]: time="2025-07-10T00:48:13.054608167Z" level=info msg="Container to stop \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 10 00:48:13.057486 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3-shm.mount: Deactivated successfully. Jul 10 00:48:13.058337 systemd[1]: session-12.scope: Deactivated successfully. Jul 10 00:48:13.059084 systemd-logind[1190]: Session 12 logged out. Waiting for processes to exit. Jul 10 00:48:13.060028 systemd-logind[1190]: Removed session 12. Jul 10 00:48:13.064511 systemd[1]: cri-containerd-1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3.scope: Deactivated successfully. Jul 10 00:48:13.064000 audit: BPF prog-id=165 op=UNLOAD Jul 10 00:48:13.069000 audit: BPF prog-id=168 op=UNLOAD Jul 10 00:48:13.083901 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3-rootfs.mount: Deactivated successfully. Jul 10 00:48:13.094160 env[1202]: time="2025-07-10T00:48:13.094117787Z" level=info msg="shim disconnected" id=1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3 Jul 10 00:48:13.094264 env[1202]: time="2025-07-10T00:48:13.094163943Z" level=warning msg="cleaning up after shim disconnected" id=1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3 namespace=k8s.io Jul 10 00:48:13.094264 env[1202]: time="2025-07-10T00:48:13.094174733Z" level=info msg="cleaning up dead shim" Jul 10 00:48:13.101332 env[1202]: time="2025-07-10T00:48:13.101303935Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:48:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4879 runtime=io.containerd.runc.v2\n" Jul 10 00:48:13.141873 systemd-networkd[1019]: cali009086d7084: Link DOWN Jul 10 00:48:13.141882 systemd-networkd[1019]: cali009086d7084: Lost carrier Jul 10 00:48:13.160000 audit[4916]: NETFILTER_CFG table=filter:133 family=2 entries=59 op=nft_register_rule pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:13.160000 audit[4916]: SYSCALL arch=c000003e syscall=46 success=yes exit=10132 a0=3 a1=7ffdcdb90410 a2=0 a3=7ffdcdb903fc items=0 ppid=3462 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:13.160000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:13.160000 audit[4916]: NETFILTER_CFG table=filter:134 family=2 entries=2 op=nft_unregister_chain pid=4916 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:13.160000 audit[4916]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffdcdb90410 a2=0 a3=55fb8b061000 items=0 ppid=3462 pid=4916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:13.160000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.140 [INFO][4902] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.140 [INFO][4902] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" iface="eth0" netns="/var/run/netns/cni-8ddb5399-763d-da23-50be-c17284814af0" Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.141 [INFO][4902] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" iface="eth0" netns="/var/run/netns/cni-8ddb5399-763d-da23-50be-c17284814af0" Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.162 [INFO][4902] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" after=21.986108ms iface="eth0" netns="/var/run/netns/cni-8ddb5399-763d-da23-50be-c17284814af0" Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.162 [INFO][4902] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.162 [INFO][4902] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.183 [INFO][4918] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.183 [INFO][4918] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.184 [INFO][4918] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.218 [INFO][4918] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.218 [INFO][4918] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.219 [INFO][4918] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:13.224790 env[1202]: 2025-07-10 00:48:13.221 [INFO][4902] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:13.227667 systemd[1]: run-netns-cni\x2d8ddb5399\x2d763d\x2dda23\x2d50be\x2dc17284814af0.mount: Deactivated successfully. Jul 10 00:48:13.228543 env[1202]: time="2025-07-10T00:48:13.228489712Z" level=info msg="TearDown network for sandbox \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\" successfully" Jul 10 00:48:13.228543 env[1202]: time="2025-07-10T00:48:13.228524919Z" level=info msg="StopPodSandbox for \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\" returns successfully" Jul 10 00:48:13.229107 env[1202]: time="2025-07-10T00:48:13.229050414Z" level=info msg="StopPodSandbox for \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\"" Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.261 [WARNING][4937] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0", GenerateName:"calico-apiserver-6f4f84749-", Namespace:"calico-apiserver", SelfLink:"", UID:"f6f00b3e-a850-4a67-9877-16e2b2fdf120", ResourceVersion:"1233", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f4f84749", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3", Pod:"calico-apiserver-6f4f84749-bc2qs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali009086d7084", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.262 [INFO][4937] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.262 [INFO][4937] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" iface="eth0" netns="" Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.262 [INFO][4937] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.262 [INFO][4937] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.284 [INFO][4945] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.284 [INFO][4945] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.284 [INFO][4945] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.290 [WARNING][4945] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.290 [INFO][4945] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.291 [INFO][4945] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:13.295541 env[1202]: 2025-07-10 00:48:13.293 [INFO][4937] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:13.296243 env[1202]: time="2025-07-10T00:48:13.295807688Z" level=info msg="TearDown network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\" successfully" Jul 10 00:48:13.296243 env[1202]: time="2025-07-10T00:48:13.295838385Z" level=info msg="StopPodSandbox for \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\" returns successfully" Jul 10 00:48:13.401311 kubelet[1944]: I0710 00:48:13.400564 1944 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-qsc6r\" (UniqueName: \"kubernetes.io/projected/f6f00b3e-a850-4a67-9877-16e2b2fdf120-kube-api-access-qsc6r\") pod \"f6f00b3e-a850-4a67-9877-16e2b2fdf120\" (UID: \"f6f00b3e-a850-4a67-9877-16e2b2fdf120\") " Jul 10 00:48:13.401311 kubelet[1944]: I0710 00:48:13.400616 1944 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f6f00b3e-a850-4a67-9877-16e2b2fdf120-calico-apiserver-certs\") pod \"f6f00b3e-a850-4a67-9877-16e2b2fdf120\" (UID: \"f6f00b3e-a850-4a67-9877-16e2b2fdf120\") " Jul 10 00:48:13.406899 kubelet[1944]: I0710 00:48:13.406850 1944 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f6f00b3e-a850-4a67-9877-16e2b2fdf120-kube-api-access-qsc6r" (OuterVolumeSpecName: "kube-api-access-qsc6r") pod "f6f00b3e-a850-4a67-9877-16e2b2fdf120" (UID: "f6f00b3e-a850-4a67-9877-16e2b2fdf120"). InnerVolumeSpecName "kube-api-access-qsc6r". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 10 00:48:13.407147 kubelet[1944]: I0710 00:48:13.406854 1944 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f6f00b3e-a850-4a67-9877-16e2b2fdf120-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "f6f00b3e-a850-4a67-9877-16e2b2fdf120" (UID: "f6f00b3e-a850-4a67-9877-16e2b2fdf120"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 10 00:48:13.408489 systemd[1]: var-lib-kubelet-pods-f6f00b3e\x2da850\x2d4a67\x2d9877\x2d16e2b2fdf120-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dqsc6r.mount: Deactivated successfully. Jul 10 00:48:13.408598 systemd[1]: var-lib-kubelet-pods-f6f00b3e\x2da850\x2d4a67\x2d9877\x2d16e2b2fdf120-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 10 00:48:13.501630 kubelet[1944]: I0710 00:48:13.501541 1944 reconciler_common.go:293] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f6f00b3e-a850-4a67-9877-16e2b2fdf120-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 10 00:48:13.501630 kubelet[1944]: I0710 00:48:13.501625 1944 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-qsc6r\" (UniqueName: \"kubernetes.io/projected/f6f00b3e-a850-4a67-9877-16e2b2fdf120-kube-api-access-qsc6r\") on node \"localhost\" DevicePath \"\"" Jul 10 00:48:13.580618 systemd[1]: Removed slice kubepods-besteffort-podf6f00b3e_a850_4a67_9877_16e2b2fdf120.slice. Jul 10 00:48:13.580727 systemd[1]: kubepods-besteffort-podf6f00b3e_a850_4a67_9877_16e2b2fdf120.slice: Consumed 1.059s CPU time. Jul 10 00:48:13.819391 kubelet[1944]: I0710 00:48:13.819356 1944 scope.go:117] "RemoveContainer" containerID="8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c" Jul 10 00:48:13.822160 env[1202]: time="2025-07-10T00:48:13.821370397Z" level=info msg="RemoveContainer for \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\"" Jul 10 00:48:13.825656 env[1202]: time="2025-07-10T00:48:13.825631264Z" level=info msg="RemoveContainer for \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\" returns successfully" Jul 10 00:48:13.825941 kubelet[1944]: I0710 00:48:13.825859 1944 scope.go:117] "RemoveContainer" containerID="8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c" Jul 10 00:48:13.826208 env[1202]: time="2025-07-10T00:48:13.826092500Z" level=error msg="ContainerStatus for \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\": not found" Jul 10 00:48:13.826381 kubelet[1944]: E0710 00:48:13.826330 1944 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\": not found" containerID="8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c" Jul 10 00:48:13.826381 kubelet[1944]: I0710 00:48:13.826363 1944 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c"} err="failed to get container status \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\": rpc error: code = NotFound desc = an error occurred when try to find container \"8860c150c8132af5a26ca3560c3a5be17f35bed730c2215b0b584829da89043c\": not found" Jul 10 00:48:13.874000 audit[4958]: NETFILTER_CFG table=filter:135 family=2 entries=10 op=nft_register_rule pid=4958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:13.874000 audit[4958]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffa1394cc0 a2=0 a3=7fffa1394cac items=0 ppid=2051 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:13.874000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:13.882000 audit[4958]: NETFILTER_CFG table=nat:136 family=2 entries=38 op=nft_register_rule pid=4958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:13.882000 audit[4958]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fffa1394cc0 a2=0 a3=7fffa1394cac items=0 ppid=2051 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:13.882000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:15.425304 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3478366424.mount: Deactivated successfully. Jul 10 00:48:15.579418 kubelet[1944]: I0710 00:48:15.577752 1944 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="f6f00b3e-a850-4a67-9877-16e2b2fdf120" path="/var/lib/kubelet/pods/f6f00b3e-a850-4a67-9877-16e2b2fdf120/volumes" Jul 10 00:48:16.387848 env[1202]: time="2025-07-10T00:48:16.387790286Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:16.389683 env[1202]: time="2025-07-10T00:48:16.389650456Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:16.391355 env[1202]: time="2025-07-10T00:48:16.391296555Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:16.392868 env[1202]: time="2025-07-10T00:48:16.392845172Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:16.393343 env[1202]: time="2025-07-10T00:48:16.393317949Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 10 00:48:16.394544 env[1202]: time="2025-07-10T00:48:16.394505278Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 10 00:48:16.395678 env[1202]: time="2025-07-10T00:48:16.395643684Z" level=info msg="CreateContainer within sandbox \"cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 10 00:48:16.409134 env[1202]: time="2025-07-10T00:48:16.409086251Z" level=info msg="CreateContainer within sandbox \"cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"edc16dd0316d419fce3a8d9d2456b413d610e281c42a3c3833b0bc08148394a0\"" Jul 10 00:48:16.409599 env[1202]: time="2025-07-10T00:48:16.409563828Z" level=info msg="StartContainer for \"edc16dd0316d419fce3a8d9d2456b413d610e281c42a3c3833b0bc08148394a0\"" Jul 10 00:48:16.427257 systemd[1]: Started cri-containerd-edc16dd0316d419fce3a8d9d2456b413d610e281c42a3c3833b0bc08148394a0.scope. Jul 10 00:48:16.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.438824 kernel: kauditd_printk_skb: 117 callbacks suppressed Jul 10 00:48:16.438904 kernel: audit: type=1400 audit(1752108496.437:1484): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.444372 kernel: audit: type=1400 audit(1752108496.437:1485): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.444475 kernel: audit: type=1400 audit(1752108496.437:1486): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.447749 kernel: audit: type=1400 audit(1752108496.437:1487): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.453343 kernel: audit: type=1400 audit(1752108496.437:1488): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.453389 kernel: audit: type=1400 audit(1752108496.437:1489): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.462724 kernel: audit: type=1400 audit(1752108496.437:1490): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.437000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.437000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.468477 kernel: audit: type=1400 audit(1752108496.437:1491): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.468533 kernel: audit: type=1400 audit(1752108496.437:1492): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.468564 kernel: audit: type=1400 audit(1752108496.440:1493): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.440000 audit: BPF prog-id=225 op=LOAD Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4300 pid=4972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:16.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564633136646430333136643431396663653361386439643234353662 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4300 pid=4972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:16.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564633136646430333136643431396663653361386439643234353662 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.441000 audit: BPF prog-id=226 op=LOAD Jul 10 00:48:16.441000 audit[4972]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000213200 items=0 ppid=4300 pid=4972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:16.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564633136646430333136643431396663653361386439643234353662 Jul 10 00:48:16.443000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.443000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.443000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.443000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.443000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.443000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.443000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.443000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.443000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.443000 audit: BPF prog-id=227 op=LOAD Jul 10 00:48:16.443000 audit[4972]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000213248 items=0 ppid=4300 pid=4972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:16.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564633136646430333136643431396663653361386439643234353662 Jul 10 00:48:16.446000 audit: BPF prog-id=227 op=UNLOAD Jul 10 00:48:16.446000 audit: BPF prog-id=226 op=UNLOAD Jul 10 00:48:16.446000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.446000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.446000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.446000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.446000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.446000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.446000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.446000 audit[4972]: AVC avc: denied { perfmon } for pid=4972 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.446000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.446000 audit[4972]: AVC avc: denied { bpf } for pid=4972 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:16.446000 audit: BPF prog-id=228 op=LOAD Jul 10 00:48:16.446000 audit[4972]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000213658 items=0 ppid=4300 pid=4972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:16.446000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564633136646430333136643431396663653361386439643234353662 Jul 10 00:48:16.483219 env[1202]: time="2025-07-10T00:48:16.483179844Z" level=info msg="StartContainer for \"edc16dd0316d419fce3a8d9d2456b413d610e281c42a3c3833b0bc08148394a0\" returns successfully" Jul 10 00:48:16.851000 audit[5016]: NETFILTER_CFG table=filter:137 family=2 entries=10 op=nft_register_rule pid=5016 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:16.851000 audit[5016]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc9abf07e0 a2=0 a3=7ffc9abf07cc items=0 ppid=2051 pid=5016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:16.851000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:16.857000 audit[5016]: NETFILTER_CFG table=nat:138 family=2 entries=24 op=nft_register_rule pid=5016 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:16.857000 audit[5016]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffc9abf07e0 a2=0 a3=7ffc9abf07cc items=0 ppid=2051 pid=5016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:16.857000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:18.047518 env[1202]: time="2025-07-10T00:48:18.047467213Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:18.049776 env[1202]: time="2025-07-10T00:48:18.049725069Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:18.051527 env[1202]: time="2025-07-10T00:48:18.051501593Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:18.053122 env[1202]: time="2025-07-10T00:48:18.053084935Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:18.053434 env[1202]: time="2025-07-10T00:48:18.053397280Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 10 00:48:18.054885 env[1202]: time="2025-07-10T00:48:18.054856609Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 10 00:48:18.055455 systemd[1]: Started sshd@12-10.0.0.142:22-10.0.0.1:53888.service. Jul 10 00:48:18.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.142:22-10.0.0.1:53888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:18.055994 env[1202]: time="2025-07-10T00:48:18.055842028Z" level=info msg="CreateContainer within sandbox \"6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 10 00:48:18.073823 env[1202]: time="2025-07-10T00:48:18.073755083Z" level=info msg="CreateContainer within sandbox \"6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"959c821c57d7f010302b07e3087f418b960c2335c865ee31e3b18f3ae7d46c0e\"" Jul 10 00:48:18.075244 env[1202]: time="2025-07-10T00:48:18.074471086Z" level=info msg="StartContainer for \"959c821c57d7f010302b07e3087f418b960c2335c865ee31e3b18f3ae7d46c0e\"" Jul 10 00:48:18.097080 systemd[1]: Started cri-containerd-959c821c57d7f010302b07e3087f418b960c2335c865ee31e3b18f3ae7d46c0e.scope. Jul 10 00:48:18.099000 audit[5051]: USER_ACCT pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.100307 sshd[5051]: Accepted publickey for core from 10.0.0.1 port 53888 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:18.100000 audit[5051]: CRED_ACQ pid=5051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.100000 audit[5051]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff38f191a0 a2=3 a3=0 items=0 ppid=1 pid=5051 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:18.100000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:18.101666 sshd[5051]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:18.107372 systemd[1]: Started session-13.scope. Jul 10 00:48:18.108742 systemd-logind[1190]: New session 13 of user core. Jul 10 00:48:18.117000 audit[5051]: USER_START pid=5051 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.118000 audit[5079]: CRED_ACQ pid=5079 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f5cc42bf218 items=0 ppid=4359 pid=5062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:18.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935396338323163353764376630313033303262303765333038376634 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit: BPF prog-id=229 op=LOAD Jul 10 00:48:18.120000 audit[5062]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003a0a78 items=0 ppid=4359 pid=5062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:18.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935396338323163353764376630313033303262303765333038376634 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit: BPF prog-id=230 op=LOAD Jul 10 00:48:18.120000 audit[5062]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003a0ac8 items=0 ppid=4359 pid=5062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:18.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935396338323163353764376630313033303262303765333038376634 Jul 10 00:48:18.120000 audit: BPF prog-id=230 op=UNLOAD Jul 10 00:48:18.120000 audit: BPF prog-id=229 op=UNLOAD Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { perfmon } for pid=5062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit[5062]: AVC avc: denied { bpf } for pid=5062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:18.120000 audit: BPF prog-id=231 op=LOAD Jul 10 00:48:18.120000 audit[5062]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003a0b58 items=0 ppid=4359 pid=5062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:18.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935396338323163353764376630313033303262303765333038376634 Jul 10 00:48:18.133636 env[1202]: time="2025-07-10T00:48:18.133573224Z" level=info msg="StartContainer for \"959c821c57d7f010302b07e3087f418b960c2335c865ee31e3b18f3ae7d46c0e\" returns successfully" Jul 10 00:48:18.325349 sshd[5051]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:18.325000 audit[5051]: USER_END pid=5051 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.325000 audit[5051]: CRED_DISP pid=5051 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.328008 systemd[1]: sshd@12-10.0.0.142:22-10.0.0.1:53888.service: Deactivated successfully. Jul 10 00:48:18.327000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.142:22-10.0.0.1:53888 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:18.328808 systemd[1]: session-13.scope: Deactivated successfully. Jul 10 00:48:18.329296 systemd-logind[1190]: Session 13 logged out. Waiting for processes to exit. Jul 10 00:48:18.329939 systemd-logind[1190]: Removed session 13. Jul 10 00:48:18.859214 systemd[1]: run-containerd-runc-k8s.io-959c821c57d7f010302b07e3087f418b960c2335c865ee31e3b18f3ae7d46c0e-runc.dmRztQ.mount: Deactivated successfully. Jul 10 00:48:20.231000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:20.231000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:20.231000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002e61b00 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:48:20.231000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:20.231000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002fbb320 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:48:20.231000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:20.702000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:20.702000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c0088101e0 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:48:20.702000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:20.702000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:20.702000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c005869880 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:48:20.702000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:20.702000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:20.702000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c007454540 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:48:20.702000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:20.703000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:20.703000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c007742c00 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:48:20.703000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:20.710000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:20.710000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c007513ba0 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:48:20.710000 audit[1830]: AVC avc: denied { watch } for pid=1830 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:20.710000 audit[1830]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c008810990 a2=fc6 a3=0 items=0 ppid=1672 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c261,c803 key=(null) Jul 10 00:48:20.710000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:20.710000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:22.159770 env[1202]: time="2025-07-10T00:48:22.159699489Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:22.161657 env[1202]: time="2025-07-10T00:48:22.161623729Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:22.163323 env[1202]: time="2025-07-10T00:48:22.163280188Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:22.164664 env[1202]: time="2025-07-10T00:48:22.164626744Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:22.165135 env[1202]: time="2025-07-10T00:48:22.165099861Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 10 00:48:22.166097 env[1202]: time="2025-07-10T00:48:22.166071094Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 10 00:48:22.177229 env[1202]: time="2025-07-10T00:48:22.177172493Z" level=info msg="CreateContainer within sandbox \"37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 10 00:48:22.191119 env[1202]: time="2025-07-10T00:48:22.191073154Z" level=info msg="CreateContainer within sandbox \"37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"29e35f8ca6d412b6b36eac363d75e83cdc396b886234836140bc8ae470825a55\"" Jul 10 00:48:22.191511 env[1202]: time="2025-07-10T00:48:22.191484806Z" level=info msg="StartContainer for \"29e35f8ca6d412b6b36eac363d75e83cdc396b886234836140bc8ae470825a55\"" Jul 10 00:48:22.205750 systemd[1]: Started cri-containerd-29e35f8ca6d412b6b36eac363d75e83cdc396b886234836140bc8ae470825a55.scope. Jul 10 00:48:22.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.218324 kernel: kauditd_printk_skb: 131 callbacks suppressed Jul 10 00:48:22.218417 kernel: audit: type=1400 audit(1752108502.216:1527): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.223629 kernel: audit: type=1400 audit(1752108502.216:1528): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.223696 kernel: audit: type=1400 audit(1752108502.216:1529): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.226353 kernel: audit: type=1400 audit(1752108502.216:1530): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.229276 kernel: audit: type=1400 audit(1752108502.216:1531): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.234936 kernel: audit: type=1400 audit(1752108502.216:1532): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.234983 kernel: audit: type=1400 audit(1752108502.216:1533): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.237717 kernel: audit: type=1400 audit(1752108502.216:1534): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.216000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.240493 kernel: audit: type=1400 audit(1752108502.216:1535): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.246280 kernel: audit: type=1400 audit(1752108502.220:1536): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit: BPF prog-id=232 op=LOAD Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4523 pid=5139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:22.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239653335663863613664343132623662333665616333363364373565 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4523 pid=5139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:22.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239653335663863613664343132623662333665616333363364373565 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.220000 audit: BPF prog-id=233 op=LOAD Jul 10 00:48:22.220000 audit[5139]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000d5d10 items=0 ppid=4523 pid=5139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:22.220000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239653335663863613664343132623662333665616333363364373565 Jul 10 00:48:22.222000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.222000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.222000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.222000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.222000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.222000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.222000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.222000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.222000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.222000 audit: BPF prog-id=234 op=LOAD Jul 10 00:48:22.222000 audit[5139]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000d5d58 items=0 ppid=4523 pid=5139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:22.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239653335663863613664343132623662333665616333363364373565 Jul 10 00:48:22.225000 audit: BPF prog-id=234 op=UNLOAD Jul 10 00:48:22.225000 audit: BPF prog-id=233 op=UNLOAD Jul 10 00:48:22.225000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.225000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.225000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.225000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.225000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.225000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.225000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.225000 audit[5139]: AVC avc: denied { perfmon } for pid=5139 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.225000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.225000 audit[5139]: AVC avc: denied { bpf } for pid=5139 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:22.225000 audit: BPF prog-id=235 op=LOAD Jul 10 00:48:22.225000 audit[5139]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c4168 items=0 ppid=4523 pid=5139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:22.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239653335663863613664343132623662333665616333363364373565 Jul 10 00:48:22.267751 env[1202]: time="2025-07-10T00:48:22.267155396Z" level=info msg="StartContainer for \"29e35f8ca6d412b6b36eac363d75e83cdc396b886234836140bc8ae470825a55\" returns successfully" Jul 10 00:48:22.854953 kubelet[1944]: I0710 00:48:22.853278 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7c6b46bdd-r7ps4" podStartSLOduration=26.666480071 podStartE2EDuration="40.853259357s" podCreationTimestamp="2025-07-10 00:47:42 +0000 UTC" firstStartedPulling="2025-07-10 00:48:07.979119785 +0000 UTC m=+44.486262340" lastFinishedPulling="2025-07-10 00:48:22.165899071 +0000 UTC m=+58.673041626" observedRunningTime="2025-07-10 00:48:22.853117591 +0000 UTC m=+59.360260146" watchObservedRunningTime="2025-07-10 00:48:22.853259357 +0000 UTC m=+59.360401912" Jul 10 00:48:22.855561 kubelet[1944]: I0710 00:48:22.855138 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-h48tl" podStartSLOduration=32.494696569 podStartE2EDuration="41.855127913s" podCreationTimestamp="2025-07-10 00:47:41 +0000 UTC" firstStartedPulling="2025-07-10 00:48:07.033825237 +0000 UTC m=+43.540967792" lastFinishedPulling="2025-07-10 00:48:16.39425658 +0000 UTC m=+52.901399136" observedRunningTime="2025-07-10 00:48:16.839874084 +0000 UTC m=+53.347016629" watchObservedRunningTime="2025-07-10 00:48:22.855127913 +0000 UTC m=+59.362270468" Jul 10 00:48:23.329220 systemd[1]: Started sshd@13-10.0.0.142:22-10.0.0.1:43134.service. Jul 10 00:48:23.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.142:22-10.0.0.1:43134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:23.367000 audit[5203]: USER_ACCT pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.368689 sshd[5203]: Accepted publickey for core from 10.0.0.1 port 43134 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:23.368000 audit[5203]: CRED_ACQ pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.368000 audit[5203]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc8a26430 a2=3 a3=0 items=0 ppid=1 pid=5203 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:23.368000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:23.369885 sshd[5203]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:23.373219 systemd-logind[1190]: New session 14 of user core. Jul 10 00:48:23.374064 systemd[1]: Started session-14.scope. Jul 10 00:48:23.377000 audit[5203]: USER_START pid=5203 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.378000 audit[5205]: CRED_ACQ pid=5205 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.707504 env[1202]: time="2025-07-10T00:48:23.706500241Z" level=info msg="StopPodSandbox for \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\"" Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.794 [WARNING][5225] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0", GenerateName:"calico-apiserver-6f4f84749-", Namespace:"calico-apiserver", SelfLink:"", UID:"2883d529-10fa-4514-a96f-6c1f5ac98c7c", ResourceVersion:"1144", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f4f84749", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa", Pod:"calico-apiserver-6f4f84749-ccnrs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali52fe2fd730f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.794 [INFO][5225] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.794 [INFO][5225] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" iface="eth0" netns="" Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.794 [INFO][5225] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.794 [INFO][5225] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.834 [INFO][5233] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" HandleID="k8s-pod-network.f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.835 [INFO][5233] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.835 [INFO][5233] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.844 [WARNING][5233] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" HandleID="k8s-pod-network.f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.844 [INFO][5233] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" HandleID="k8s-pod-network.f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.845 [INFO][5233] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:23.851557 env[1202]: 2025-07-10 00:48:23.849 [INFO][5225] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:23.852176 env[1202]: time="2025-07-10T00:48:23.852140853Z" level=info msg="TearDown network for sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\" successfully" Jul 10 00:48:23.852261 env[1202]: time="2025-07-10T00:48:23.852239699Z" level=info msg="StopPodSandbox for \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\" returns successfully" Jul 10 00:48:23.852955 env[1202]: time="2025-07-10T00:48:23.852910287Z" level=info msg="RemovePodSandbox for \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\"" Jul 10 00:48:23.853005 env[1202]: time="2025-07-10T00:48:23.852959460Z" level=info msg="Forcibly stopping sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\"" Jul 10 00:48:23.887496 sshd[5203]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:23.888000 audit[5203]: USER_END pid=5203 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.888000 audit[5203]: CRED_DISP pid=5203 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.890635 systemd-logind[1190]: Session 14 logged out. Waiting for processes to exit. Jul 10 00:48:23.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.142:22-10.0.0.1:43134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:23.890985 systemd[1]: sshd@13-10.0.0.142:22-10.0.0.1:43134.service: Deactivated successfully. Jul 10 00:48:23.891686 systemd[1]: session-14.scope: Deactivated successfully. Jul 10 00:48:23.893192 systemd-logind[1190]: Removed session 14. Jul 10 00:48:24.009159 env[1202]: time="2025-07-10T00:48:24.009045791Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:24.011944 env[1202]: time="2025-07-10T00:48:24.011896168Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:24.013300 env[1202]: time="2025-07-10T00:48:24.013267381Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:24.015007 env[1202]: time="2025-07-10T00:48:24.014968924Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:24.015490 env[1202]: time="2025-07-10T00:48:24.015441470Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 10 00:48:24.017909 env[1202]: time="2025-07-10T00:48:24.017871249Z" level=info msg="CreateContainer within sandbox \"6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:23.906 [WARNING][5254] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0", GenerateName:"calico-apiserver-6f4f84749-", Namespace:"calico-apiserver", SelfLink:"", UID:"2883d529-10fa-4514-a96f-6c1f5ac98c7c", ResourceVersion:"1144", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6f4f84749", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa", Pod:"calico-apiserver-6f4f84749-ccnrs", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali52fe2fd730f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:23.907 [INFO][5254] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:23.907 [INFO][5254] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" iface="eth0" netns="" Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:23.907 [INFO][5254] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:23.907 [INFO][5254] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:24.006 [INFO][5264] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" HandleID="k8s-pod-network.f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:24.006 [INFO][5264] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:24.006 [INFO][5264] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:24.012 [WARNING][5264] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" HandleID="k8s-pod-network.f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:24.012 [INFO][5264] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" HandleID="k8s-pod-network.f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:24.013 [INFO][5264] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.018458 env[1202]: 2025-07-10 00:48:24.016 [INFO][5254] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1" Jul 10 00:48:24.019019 env[1202]: time="2025-07-10T00:48:24.018467017Z" level=info msg="TearDown network for sandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\" successfully" Jul 10 00:48:24.022891 env[1202]: time="2025-07-10T00:48:24.022860299Z" level=info msg="RemovePodSandbox \"f03a968b51f36268c0cb5246e648fd36af7500e0495ab77d7e569cdd8d3ffaf1\" returns successfully" Jul 10 00:48:24.023326 env[1202]: time="2025-07-10T00:48:24.023286970Z" level=info msg="StopPodSandbox for \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\"" Jul 10 00:48:24.033375 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3410252099.mount: Deactivated successfully. Jul 10 00:48:24.036254 env[1202]: time="2025-07-10T00:48:24.036217960Z" level=info msg="CreateContainer within sandbox \"6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"5851724ffd56d5b79d43ecbf4729c18e200a327861d0d797dabbe52be5a86be7\"" Jul 10 00:48:24.036989 env[1202]: time="2025-07-10T00:48:24.036957158Z" level=info msg="StartContainer for \"5851724ffd56d5b79d43ecbf4729c18e200a327861d0d797dabbe52be5a86be7\"" Jul 10 00:48:24.062565 systemd[1]: Started cri-containerd-5851724ffd56d5b79d43ecbf4729c18e200a327861d0d797dabbe52be5a86be7.scope. Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit[5297]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f70c6d02e18 items=0 ppid=4359 pid=5297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:24.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538353137323466666435366435623739643433656362663437323963 Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.092000 audit: BPF prog-id=236 op=LOAD Jul 10 00:48:24.092000 audit[5297]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000092538 items=0 ppid=4359 pid=5297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:24.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538353137323466666435366435623739643433656362663437323963 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit: BPF prog-id=237 op=LOAD Jul 10 00:48:24.093000 audit[5297]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000092588 items=0 ppid=4359 pid=5297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:24.093000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538353137323466666435366435623739643433656362663437323963 Jul 10 00:48:24.093000 audit: BPF prog-id=237 op=UNLOAD Jul 10 00:48:24.093000 audit: BPF prog-id=236 op=UNLOAD Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { perfmon } for pid=5297 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit[5297]: AVC avc: denied { bpf } for pid=5297 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:24.093000 audit: BPF prog-id=238 op=LOAD Jul 10 00:48:24.093000 audit[5297]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000092618 items=0 ppid=4359 pid=5297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:24.093000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538353137323466666435366435623739643433656362663437323963 Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.062 [WARNING][5284] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--h48tl-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89", ResourceVersion:"1257", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f", Pod:"goldmane-58fd7646b9-h48tl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali203b9d94aa6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.062 [INFO][5284] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.062 [INFO][5284] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" iface="eth0" netns="" Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.062 [INFO][5284] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.062 [INFO][5284] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.096 [INFO][5308] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" HandleID="k8s-pod-network.0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.096 [INFO][5308] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.096 [INFO][5308] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.101 [WARNING][5308] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" HandleID="k8s-pod-network.0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.101 [INFO][5308] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" HandleID="k8s-pod-network.0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.102 [INFO][5308] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.107995 env[1202]: 2025-07-10 00:48:24.106 [INFO][5284] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:24.108423 env[1202]: time="2025-07-10T00:48:24.108031384Z" level=info msg="TearDown network for sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\" successfully" Jul 10 00:48:24.108423 env[1202]: time="2025-07-10T00:48:24.108065017Z" level=info msg="StopPodSandbox for \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\" returns successfully" Jul 10 00:48:24.108584 env[1202]: time="2025-07-10T00:48:24.108544546Z" level=info msg="RemovePodSandbox for \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\"" Jul 10 00:48:24.108640 env[1202]: time="2025-07-10T00:48:24.108579061Z" level=info msg="Forcibly stopping sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\"" Jul 10 00:48:24.173617 systemd[1]: run-containerd-runc-k8s.io-5851724ffd56d5b79d43ecbf4729c18e200a327861d0d797dabbe52be5a86be7-runc.6oDNSw.mount: Deactivated successfully. Jul 10 00:48:24.179614 env[1202]: time="2025-07-10T00:48:24.179538373Z" level=info msg="StartContainer for \"5851724ffd56d5b79d43ecbf4729c18e200a327861d0d797dabbe52be5a86be7\" returns successfully" Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.182 [WARNING][5345] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--h48tl-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"b1a6eea7-3897-4f93-bcfd-0f8cea3cbd89", ResourceVersion:"1257", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cf499609991507f7f48be5ad4e04bd8b047418aeb4b7623b2a6b48a81f4ded6f", Pod:"goldmane-58fd7646b9-h48tl", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali203b9d94aa6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.183 [INFO][5345] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.183 [INFO][5345] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" iface="eth0" netns="" Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.183 [INFO][5345] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.183 [INFO][5345] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.200 [INFO][5361] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" HandleID="k8s-pod-network.0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.200 [INFO][5361] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.200 [INFO][5361] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.207 [WARNING][5361] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" HandleID="k8s-pod-network.0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.207 [INFO][5361] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" HandleID="k8s-pod-network.0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Workload="localhost-k8s-goldmane--58fd7646b9--h48tl-eth0" Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.208 [INFO][5361] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.212461 env[1202]: 2025-07-10 00:48:24.210 [INFO][5345] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab" Jul 10 00:48:24.212993 env[1202]: time="2025-07-10T00:48:24.212459879Z" level=info msg="TearDown network for sandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\" successfully" Jul 10 00:48:24.216248 env[1202]: time="2025-07-10T00:48:24.216223510Z" level=info msg="RemovePodSandbox \"0de32cd681985c252002a5bfa97c9918b24f78886d98e729c4262f0e4a5b2eab\" returns successfully" Jul 10 00:48:24.216797 env[1202]: time="2025-07-10T00:48:24.216751631Z" level=info msg="StopPodSandbox for \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\"" Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.248 [WARNING][5378] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"92f142e6-5a1f-4990-8f0f-7b715f748a50", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c", Pod:"coredns-7c65d6cfc9-5nrl8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali91f5794ad13", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.248 [INFO][5378] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.248 [INFO][5378] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" iface="eth0" netns="" Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.248 [INFO][5378] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.248 [INFO][5378] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.267 [INFO][5387] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" HandleID="k8s-pod-network.c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.267 [INFO][5387] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.267 [INFO][5387] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.362 [WARNING][5387] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" HandleID="k8s-pod-network.c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.362 [INFO][5387] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" HandleID="k8s-pod-network.c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.364 [INFO][5387] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.368358 env[1202]: 2025-07-10 00:48:24.366 [INFO][5378] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:24.368358 env[1202]: time="2025-07-10T00:48:24.368272168Z" level=info msg="TearDown network for sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\" successfully" Jul 10 00:48:24.368358 env[1202]: time="2025-07-10T00:48:24.368303777Z" level=info msg="StopPodSandbox for \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\" returns successfully" Jul 10 00:48:24.369258 env[1202]: time="2025-07-10T00:48:24.369204117Z" level=info msg="RemovePodSandbox for \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\"" Jul 10 00:48:24.369258 env[1202]: time="2025-07-10T00:48:24.369248510Z" level=info msg="Forcibly stopping sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\"" Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.400 [WARNING][5406] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"92f142e6-5a1f-4990-8f0f-7b715f748a50", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b553a4859f9c6ae8fefff6491badf7e2c837736622f49438b9af40cfdcd28a2c", Pod:"coredns-7c65d6cfc9-5nrl8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali91f5794ad13", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.400 [INFO][5406] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.400 [INFO][5406] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" iface="eth0" netns="" Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.400 [INFO][5406] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.400 [INFO][5406] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.420 [INFO][5415] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" HandleID="k8s-pod-network.c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.420 [INFO][5415] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.420 [INFO][5415] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.426 [WARNING][5415] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" HandleID="k8s-pod-network.c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.426 [INFO][5415] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" HandleID="k8s-pod-network.c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Workload="localhost-k8s-coredns--7c65d6cfc9--5nrl8-eth0" Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.427 [INFO][5415] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.431253 env[1202]: 2025-07-10 00:48:24.429 [INFO][5406] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080" Jul 10 00:48:24.431955 env[1202]: time="2025-07-10T00:48:24.431285872Z" level=info msg="TearDown network for sandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\" successfully" Jul 10 00:48:24.500014 env[1202]: time="2025-07-10T00:48:24.499969063Z" level=info msg="RemovePodSandbox \"c96610722535dbc4e5d2d846067727eb29bb320a9d6ef73aa23948c31b5a7080\" returns successfully" Jul 10 00:48:24.500541 env[1202]: time="2025-07-10T00:48:24.500476265Z" level=info msg="StopPodSandbox for \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\"" Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.532 [WARNING][5434] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.533 [INFO][5434] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.533 [INFO][5434] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" iface="eth0" netns="" Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.533 [INFO][5434] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.533 [INFO][5434] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.551 [INFO][5443] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.551 [INFO][5443] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.551 [INFO][5443] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.556 [WARNING][5443] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.556 [INFO][5443] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.558 [INFO][5443] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.562163 env[1202]: 2025-07-10 00:48:24.559 [INFO][5434] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:24.562590 env[1202]: time="2025-07-10T00:48:24.562207383Z" level=info msg="TearDown network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\" successfully" Jul 10 00:48:24.562590 env[1202]: time="2025-07-10T00:48:24.562239853Z" level=info msg="StopPodSandbox for \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\" returns successfully" Jul 10 00:48:24.563030 env[1202]: time="2025-07-10T00:48:24.562954754Z" level=info msg="RemovePodSandbox for \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\"" Jul 10 00:48:24.563030 env[1202]: time="2025-07-10T00:48:24.562995791Z" level=info msg="Forcibly stopping sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\"" Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.601 [WARNING][5461] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.601 [INFO][5461] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.601 [INFO][5461] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" iface="eth0" netns="" Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.601 [INFO][5461] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.601 [INFO][5461] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.621 [INFO][5470] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.621 [INFO][5470] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.621 [INFO][5470] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.627 [WARNING][5470] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.627 [INFO][5470] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" HandleID="k8s-pod-network.99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.628 [INFO][5470] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.632170 env[1202]: 2025-07-10 00:48:24.630 [INFO][5461] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2" Jul 10 00:48:24.632170 env[1202]: time="2025-07-10T00:48:24.632132022Z" level=info msg="TearDown network for sandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\" successfully" Jul 10 00:48:24.635820 env[1202]: time="2025-07-10T00:48:24.635793572Z" level=info msg="RemovePodSandbox \"99460a1eb9d8f2881bd170f14e7483782f21fe54243fb901209abbb9ab9b00a2\" returns successfully" Jul 10 00:48:24.636401 env[1202]: time="2025-07-10T00:48:24.636360145Z" level=info msg="StopPodSandbox for \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\"" Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.666 [WARNING][5487] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.666 [INFO][5487] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.666 [INFO][5487] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" iface="eth0" netns="" Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.666 [INFO][5487] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.666 [INFO][5487] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.685 [INFO][5495] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.685 [INFO][5495] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.685 [INFO][5495] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.692 [WARNING][5495] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.693 [INFO][5495] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.694 [INFO][5495] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.698835 env[1202]: 2025-07-10 00:48:24.696 [INFO][5487] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:24.699412 env[1202]: time="2025-07-10T00:48:24.698857597Z" level=info msg="TearDown network for sandbox \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\" successfully" Jul 10 00:48:24.699412 env[1202]: time="2025-07-10T00:48:24.698885270Z" level=info msg="StopPodSandbox for \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\" returns successfully" Jul 10 00:48:24.699639 env[1202]: time="2025-07-10T00:48:24.699585728Z" level=info msg="RemovePodSandbox for \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\"" Jul 10 00:48:24.699818 env[1202]: time="2025-07-10T00:48:24.699630994Z" level=info msg="Forcibly stopping sandbox \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\"" Jul 10 00:48:24.708010 kubelet[1944]: I0710 00:48:24.707033 1944 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 10 00:48:24.709495 kubelet[1944]: I0710 00:48:24.709466 1944 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.735 [WARNING][5514] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" WorkloadEndpoint="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.735 [INFO][5514] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.735 [INFO][5514] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" iface="eth0" netns="" Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.735 [INFO][5514] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.735 [INFO][5514] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.757 [INFO][5521] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.757 [INFO][5521] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.757 [INFO][5521] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.762 [WARNING][5521] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.762 [INFO][5521] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" HandleID="k8s-pod-network.1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Workload="localhost-k8s-calico--apiserver--6f4f84749--bc2qs-eth0" Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.763 [INFO][5521] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.767359 env[1202]: 2025-07-10 00:48:24.765 [INFO][5514] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3" Jul 10 00:48:24.768020 env[1202]: time="2025-07-10T00:48:24.767413595Z" level=info msg="TearDown network for sandbox \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\" successfully" Jul 10 00:48:24.771294 env[1202]: time="2025-07-10T00:48:24.771267058Z" level=info msg="RemovePodSandbox \"1526c8b2e549ffd883e8785035635d17fa845654dd2d2168a11dab0ec3980de3\" returns successfully" Jul 10 00:48:24.771832 env[1202]: time="2025-07-10T00:48:24.771761509Z" level=info msg="StopPodSandbox for \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\"" Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.801 [WARNING][5539] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qlpnz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d5ed6e84-883c-4226-9ad8-831f6e16569a", ResourceVersion:"1111", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f", Pod:"csi-node-driver-qlpnz", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"caliebdcb2277bc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.802 [INFO][5539] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.802 [INFO][5539] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" iface="eth0" netns="" Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.802 [INFO][5539] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.802 [INFO][5539] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.820 [INFO][5548] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" HandleID="k8s-pod-network.65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.820 [INFO][5548] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.820 [INFO][5548] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.830 [WARNING][5548] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" HandleID="k8s-pod-network.65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.830 [INFO][5548] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" HandleID="k8s-pod-network.65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.831 [INFO][5548] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.835209 env[1202]: 2025-07-10 00:48:24.833 [INFO][5539] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:24.835834 env[1202]: time="2025-07-10T00:48:24.835240530Z" level=info msg="TearDown network for sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\" successfully" Jul 10 00:48:24.835834 env[1202]: time="2025-07-10T00:48:24.835270907Z" level=info msg="StopPodSandbox for \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\" returns successfully" Jul 10 00:48:24.836003 env[1202]: time="2025-07-10T00:48:24.835817246Z" level=info msg="RemovePodSandbox for \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\"" Jul 10 00:48:24.836003 env[1202]: time="2025-07-10T00:48:24.835863783Z" level=info msg="Forcibly stopping sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\"" Jul 10 00:48:24.872520 kubelet[1944]: I0710 00:48:24.872416 1944 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-qlpnz" podStartSLOduration=25.990928719 podStartE2EDuration="42.872400673s" podCreationTimestamp="2025-07-10 00:47:42 +0000 UTC" firstStartedPulling="2025-07-10 00:48:07.13485631 +0000 UTC m=+43.641998865" lastFinishedPulling="2025-07-10 00:48:24.016328264 +0000 UTC m=+60.523470819" observedRunningTime="2025-07-10 00:48:24.871661662 +0000 UTC m=+61.378804237" watchObservedRunningTime="2025-07-10 00:48:24.872400673 +0000 UTC m=+61.379543248" Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.869 [WARNING][5566] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qlpnz-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d5ed6e84-883c-4226-9ad8-831f6e16569a", ResourceVersion:"1111", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6304f616b0298bea57aea97e4d9c51f025605c83035aae4adecfc827c067236f", Pod:"csi-node-driver-qlpnz", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"caliebdcb2277bc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.869 [INFO][5566] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.869 [INFO][5566] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" iface="eth0" netns="" Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.869 [INFO][5566] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.869 [INFO][5566] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.889 [INFO][5574] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" HandleID="k8s-pod-network.65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.889 [INFO][5574] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.889 [INFO][5574] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.894 [WARNING][5574] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" HandleID="k8s-pod-network.65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.894 [INFO][5574] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" HandleID="k8s-pod-network.65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Workload="localhost-k8s-csi--node--driver--qlpnz-eth0" Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.896 [INFO][5574] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.900502 env[1202]: 2025-07-10 00:48:24.898 [INFO][5566] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75" Jul 10 00:48:24.900502 env[1202]: time="2025-07-10T00:48:24.900437966Z" level=info msg="TearDown network for sandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\" successfully" Jul 10 00:48:24.904436 env[1202]: time="2025-07-10T00:48:24.904410933Z" level=info msg="RemovePodSandbox \"65f6817c0e4053986fb9b82643fb763889eaa43c78792cc54a734076a58b1d75\" returns successfully" Jul 10 00:48:24.904971 env[1202]: time="2025-07-10T00:48:24.904937535Z" level=info msg="StopPodSandbox for \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\"" Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.935 [WARNING][5593] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" WorkloadEndpoint="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.935 [INFO][5593] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.935 [INFO][5593] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" iface="eth0" netns="" Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.935 [INFO][5593] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.935 [INFO][5593] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.956 [INFO][5601] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" HandleID="k8s-pod-network.1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Workload="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.956 [INFO][5601] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.956 [INFO][5601] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.961 [WARNING][5601] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" HandleID="k8s-pod-network.1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Workload="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.961 [INFO][5601] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" HandleID="k8s-pod-network.1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Workload="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.962 [INFO][5601] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:24.966720 env[1202]: 2025-07-10 00:48:24.964 [INFO][5593] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:24.967096 env[1202]: time="2025-07-10T00:48:24.966755079Z" level=info msg="TearDown network for sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\" successfully" Jul 10 00:48:24.967096 env[1202]: time="2025-07-10T00:48:24.966789093Z" level=info msg="StopPodSandbox for \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\" returns successfully" Jul 10 00:48:24.967347 env[1202]: time="2025-07-10T00:48:24.967315043Z" level=info msg="RemovePodSandbox for \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\"" Jul 10 00:48:24.967402 env[1202]: time="2025-07-10T00:48:24.967353986Z" level=info msg="Forcibly stopping sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\"" Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:24.998 [WARNING][5619] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" WorkloadEndpoint="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:24.998 [INFO][5619] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:24.998 [INFO][5619] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" iface="eth0" netns="" Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:24.998 [INFO][5619] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:24.998 [INFO][5619] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:25.015 [INFO][5628] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" HandleID="k8s-pod-network.1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Workload="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:25.015 [INFO][5628] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:25.015 [INFO][5628] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:25.020 [WARNING][5628] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" HandleID="k8s-pod-network.1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Workload="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:25.020 [INFO][5628] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" HandleID="k8s-pod-network.1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Workload="localhost-k8s-whisker--764bb4f486--6jgng-eth0" Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:25.022 [INFO][5628] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:25.026320 env[1202]: 2025-07-10 00:48:25.024 [INFO][5619] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5" Jul 10 00:48:25.026953 env[1202]: time="2025-07-10T00:48:25.026345903Z" level=info msg="TearDown network for sandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\" successfully" Jul 10 00:48:25.029961 env[1202]: time="2025-07-10T00:48:25.029936593Z" level=info msg="RemovePodSandbox \"1dca5df585c151d5b5e28ac7ad9c138f832ed6bc5cd434181528aa1215d6c7a5\" returns successfully" Jul 10 00:48:25.030492 env[1202]: time="2025-07-10T00:48:25.030458339Z" level=info msg="StopPodSandbox for \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\"" Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.061 [WARNING][5647] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0", GenerateName:"calico-kube-controllers-7c6b46bdd-", Namespace:"calico-system", SelfLink:"", UID:"10193579-ce3e-4a12-b394-8f9d2869720e", ResourceVersion:"1302", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c6b46bdd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb", Pod:"calico-kube-controllers-7c6b46bdd-r7ps4", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic70242745e0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.062 [INFO][5647] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.062 [INFO][5647] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" iface="eth0" netns="" Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.062 [INFO][5647] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.062 [INFO][5647] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.080 [INFO][5656] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" HandleID="k8s-pod-network.d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.081 [INFO][5656] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.081 [INFO][5656] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.085 [WARNING][5656] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" HandleID="k8s-pod-network.d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.085 [INFO][5656] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" HandleID="k8s-pod-network.d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.087 [INFO][5656] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:25.090405 env[1202]: 2025-07-10 00:48:25.088 [INFO][5647] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:25.091947 env[1202]: time="2025-07-10T00:48:25.090419094Z" level=info msg="TearDown network for sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\" successfully" Jul 10 00:48:25.091947 env[1202]: time="2025-07-10T00:48:25.090446788Z" level=info msg="StopPodSandbox for \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\" returns successfully" Jul 10 00:48:25.091947 env[1202]: time="2025-07-10T00:48:25.090974466Z" level=info msg="RemovePodSandbox for \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\"" Jul 10 00:48:25.091947 env[1202]: time="2025-07-10T00:48:25.091013051Z" level=info msg="Forcibly stopping sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\"" Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.121 [WARNING][5673] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0", GenerateName:"calico-kube-controllers-7c6b46bdd-", Namespace:"calico-system", SelfLink:"", UID:"10193579-ce3e-4a12-b394-8f9d2869720e", ResourceVersion:"1302", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7c6b46bdd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"37bc237f87de85a4dbd4ab505774c318a9c15414b571a82ef86d3bc609e67fbb", Pod:"calico-kube-controllers-7c6b46bdd-r7ps4", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calic70242745e0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.121 [INFO][5673] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.121 [INFO][5673] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" iface="eth0" netns="" Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.121 [INFO][5673] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.121 [INFO][5673] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.138 [INFO][5682] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" HandleID="k8s-pod-network.d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.138 [INFO][5682] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.138 [INFO][5682] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.143 [WARNING][5682] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" HandleID="k8s-pod-network.d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.143 [INFO][5682] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" HandleID="k8s-pod-network.d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Workload="localhost-k8s-calico--kube--controllers--7c6b46bdd--r7ps4-eth0" Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.145 [INFO][5682] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:25.151736 env[1202]: 2025-07-10 00:48:25.149 [INFO][5673] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a" Jul 10 00:48:25.151736 env[1202]: time="2025-07-10T00:48:25.151693754Z" level=info msg="TearDown network for sandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\" successfully" Jul 10 00:48:25.155836 env[1202]: time="2025-07-10T00:48:25.155789319Z" level=info msg="RemovePodSandbox \"d5b374865a26f82593851507b1ef85bfab0a0564609d311cb584615c44e8891a\" returns successfully" Jul 10 00:48:25.156424 env[1202]: time="2025-07-10T00:48:25.156394416Z" level=info msg="StopPodSandbox for \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\"" Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.190 [WARNING][5700] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0", GenerateName:"calico-apiserver-67c56776df-", Namespace:"calico-apiserver", SelfLink:"", UID:"a73e65fd-c9a6-4aca-80b1-99749f4de040", ResourceVersion:"1204", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"67c56776df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29", Pod:"calico-apiserver-67c56776df-9wrhd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali92bf9dbcbf7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.190 [INFO][5700] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.190 [INFO][5700] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" iface="eth0" netns="" Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.190 [INFO][5700] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.190 [INFO][5700] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.211 [INFO][5709] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" HandleID="k8s-pod-network.0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.212 [INFO][5709] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.212 [INFO][5709] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.219 [WARNING][5709] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" HandleID="k8s-pod-network.0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.219 [INFO][5709] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" HandleID="k8s-pod-network.0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.220 [INFO][5709] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:25.224629 env[1202]: 2025-07-10 00:48:25.222 [INFO][5700] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:25.225160 env[1202]: time="2025-07-10T00:48:25.224652143Z" level=info msg="TearDown network for sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\" successfully" Jul 10 00:48:25.225160 env[1202]: time="2025-07-10T00:48:25.224682821Z" level=info msg="StopPodSandbox for \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\" returns successfully" Jul 10 00:48:25.225280 env[1202]: time="2025-07-10T00:48:25.225247010Z" level=info msg="RemovePodSandbox for \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\"" Jul 10 00:48:25.225329 env[1202]: time="2025-07-10T00:48:25.225281307Z" level=info msg="Forcibly stopping sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\"" Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.253 [WARNING][5727] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0", GenerateName:"calico-apiserver-67c56776df-", Namespace:"calico-apiserver", SelfLink:"", UID:"a73e65fd-c9a6-4aca-80b1-99749f4de040", ResourceVersion:"1204", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 40, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"67c56776df", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8c08f0e0f605a5f705350bc77aeff77d7336621ba85d4ec87f15a65eac5edf29", Pod:"calico-apiserver-67c56776df-9wrhd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali92bf9dbcbf7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.254 [INFO][5727] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.254 [INFO][5727] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" iface="eth0" netns="" Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.254 [INFO][5727] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.254 [INFO][5727] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.273 [INFO][5735] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" HandleID="k8s-pod-network.0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.274 [INFO][5735] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.274 [INFO][5735] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.280 [WARNING][5735] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" HandleID="k8s-pod-network.0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.280 [INFO][5735] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" HandleID="k8s-pod-network.0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Workload="localhost-k8s-calico--apiserver--67c56776df--9wrhd-eth0" Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.281 [INFO][5735] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:25.285135 env[1202]: 2025-07-10 00:48:25.283 [INFO][5727] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721" Jul 10 00:48:25.285661 env[1202]: time="2025-07-10T00:48:25.285143141Z" level=info msg="TearDown network for sandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\" successfully" Jul 10 00:48:25.288943 env[1202]: time="2025-07-10T00:48:25.288917966Z" level=info msg="RemovePodSandbox \"0ba40d332a57b90508dcc5d5f1754dcebb2cb68332e4c0324252389e4be71721\" returns successfully" Jul 10 00:48:25.289511 env[1202]: time="2025-07-10T00:48:25.289479039Z" level=info msg="StopPodSandbox for \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\"" Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.317 [WARNING][5754] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"5fdf3fd1-ad69-475d-821f-cc09b8131811", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b", Pod:"coredns-7c65d6cfc9-j9s7v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib39dceafb9c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.317 [INFO][5754] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.317 [INFO][5754] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" iface="eth0" netns="" Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.317 [INFO][5754] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.317 [INFO][5754] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.336 [INFO][5762] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" HandleID="k8s-pod-network.99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.336 [INFO][5762] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.336 [INFO][5762] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.341 [WARNING][5762] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" HandleID="k8s-pod-network.99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.341 [INFO][5762] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" HandleID="k8s-pod-network.99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.342 [INFO][5762] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:25.347136 env[1202]: 2025-07-10 00:48:25.345 [INFO][5754] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:25.347619 env[1202]: time="2025-07-10T00:48:25.347158170Z" level=info msg="TearDown network for sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\" successfully" Jul 10 00:48:25.347619 env[1202]: time="2025-07-10T00:48:25.347184762Z" level=info msg="StopPodSandbox for \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\" returns successfully" Jul 10 00:48:25.347739 env[1202]: time="2025-07-10T00:48:25.347681560Z" level=info msg="RemovePodSandbox for \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\"" Jul 10 00:48:25.347797 env[1202]: time="2025-07-10T00:48:25.347742608Z" level=info msg="Forcibly stopping sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\"" Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.378 [WARNING][5779] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"5fdf3fd1-ad69-475d-821f-cc09b8131811", ResourceVersion:"1051", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"931a6ef703c3b42062c356d516cfd55253cd257f760fdd7d6ea51805b006ec1b", Pod:"coredns-7c65d6cfc9-j9s7v", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib39dceafb9c", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.378 [INFO][5779] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.378 [INFO][5779] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" iface="eth0" netns="" Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.378 [INFO][5779] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.378 [INFO][5779] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.397 [INFO][5787] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" HandleID="k8s-pod-network.99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.397 [INFO][5787] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.397 [INFO][5787] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.403 [WARNING][5787] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" HandleID="k8s-pod-network.99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.404 [INFO][5787] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" HandleID="k8s-pod-network.99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Workload="localhost-k8s-coredns--7c65d6cfc9--j9s7v-eth0" Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.405 [INFO][5787] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:25.408678 env[1202]: 2025-07-10 00:48:25.407 [INFO][5779] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806" Jul 10 00:48:25.408678 env[1202]: time="2025-07-10T00:48:25.408629009Z" level=info msg="TearDown network for sandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\" successfully" Jul 10 00:48:25.414973 env[1202]: time="2025-07-10T00:48:25.414934588Z" level=info msg="RemovePodSandbox \"99f48706cc826692183ffd0f150e96d6608ce6ebd5af323548b7c959ab031806\" returns successfully" Jul 10 00:48:27.693000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:27.695745 kernel: kauditd_printk_skb: 101 callbacks suppressed Jul 10 00:48:27.695803 kernel: audit: type=1400 audit(1752108507.693:1560): avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:27.693000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:27.702466 kernel: audit: type=1400 audit(1752108507.693:1561): avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:27.702528 kernel: audit: type=1300 audit(1752108507.693:1560): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002fbb920 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:48:27.693000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002fbb920 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:48:27.693000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:27.711018 kernel: audit: type=1327 audit(1752108507.693:1560): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:27.711146 kernel: audit: type=1300 audit(1752108507.693:1561): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0030c44a0 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:48:27.693000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0030c44a0 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:48:27.715524 kernel: audit: type=1327 audit(1752108507.693:1561): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:27.693000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:27.693000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:27.722765 kernel: audit: type=1400 audit(1752108507.693:1562): avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:27.722816 kernel: audit: type=1300 audit(1752108507.693:1562): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002ee8fe0 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:48:27.693000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002ee8fe0 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:48:27.727328 kernel: audit: type=1327 audit(1752108507.693:1562): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:27.693000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:27.731168 kernel: audit: type=1400 audit(1752108507.693:1563): avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:27.693000 audit[1824]: AVC avc: denied { watch } for pid=1824 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:27.693000 audit[1824]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002fbb940 a2=fc6 a3=0 items=0 ppid=1642 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c371,c998 key=(null) Jul 10 00:48:27.693000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:28.892212 systemd[1]: Started sshd@14-10.0.0.142:22-10.0.0.1:43142.service. Jul 10 00:48:28.891000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.142:22-10.0.0.1:43142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:28.932000 audit[5796]: USER_ACCT pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.933002 sshd[5796]: Accepted publickey for core from 10.0.0.1 port 43142 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:28.933000 audit[5796]: CRED_ACQ pid=5796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.933000 audit[5796]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe42d1f110 a2=3 a3=0 items=0 ppid=1 pid=5796 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:28.933000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:28.934253 sshd[5796]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:28.937833 systemd-logind[1190]: New session 15 of user core. Jul 10 00:48:28.938690 systemd[1]: Started session-15.scope. Jul 10 00:48:28.941000 audit[5796]: USER_START pid=5796 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.942000 audit[5798]: CRED_ACQ pid=5798 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:29.089681 sshd[5796]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:29.089000 audit[5796]: USER_END pid=5796 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:29.089000 audit[5796]: CRED_DISP pid=5796 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:29.092112 systemd[1]: sshd@14-10.0.0.142:22-10.0.0.1:43142.service: Deactivated successfully. Jul 10 00:48:29.091000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.142:22-10.0.0.1:43142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:29.092901 systemd[1]: session-15.scope: Deactivated successfully. Jul 10 00:48:29.093389 systemd-logind[1190]: Session 15 logged out. Waiting for processes to exit. Jul 10 00:48:29.094119 systemd-logind[1190]: Removed session 15. Jul 10 00:48:34.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.142:22-10.0.0.1:58030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:34.094993 systemd[1]: Started sshd@15-10.0.0.142:22-10.0.0.1:58030.service. Jul 10 00:48:34.096166 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 10 00:48:34.096216 kernel: audit: type=1130 audit(1752108514.094:1573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.142:22-10.0.0.1:58030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:34.133000 audit[5839]: USER_ACCT pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.134800 sshd[5839]: Accepted publickey for core from 10.0.0.1 port 58030 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:34.138000 audit[5839]: CRED_ACQ pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.139210 sshd[5839]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:34.142671 kernel: audit: type=1101 audit(1752108514.133:1574): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.142747 kernel: audit: type=1103 audit(1752108514.138:1575): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.142768 kernel: audit: type=1006 audit(1752108514.138:1576): pid=5839 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 10 00:48:34.143136 systemd-logind[1190]: New session 16 of user core. Jul 10 00:48:34.143512 systemd[1]: Started session-16.scope. Jul 10 00:48:34.138000 audit[5839]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee680c660 a2=3 a3=0 items=0 ppid=1 pid=5839 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:34.149154 kernel: audit: type=1300 audit(1752108514.138:1576): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee680c660 a2=3 a3=0 items=0 ppid=1 pid=5839 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:34.149217 kernel: audit: type=1327 audit(1752108514.138:1576): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:34.138000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:34.146000 audit[5839]: USER_START pid=5839 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.154916 kernel: audit: type=1105 audit(1752108514.146:1577): pid=5839 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.154966 kernel: audit: type=1103 audit(1752108514.148:1578): pid=5841 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.148000 audit[5841]: CRED_ACQ pid=5841 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.215000 audit[5851]: NETFILTER_CFG table=filter:139 family=2 entries=10 op=nft_register_rule pid=5851 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:34.215000 audit[5851]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd15147c60 a2=0 a3=7ffd15147c4c items=0 ppid=2051 pid=5851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:34.224211 kernel: audit: type=1325 audit(1752108514.215:1579): table=filter:139 family=2 entries=10 op=nft_register_rule pid=5851 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:34.224257 kernel: audit: type=1300 audit(1752108514.215:1579): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd15147c60 a2=0 a3=7ffd15147c4c items=0 ppid=2051 pid=5851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:34.215000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:34.225000 audit[5851]: NETFILTER_CFG table=nat:140 family=2 entries=38 op=nft_register_rule pid=5851 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:34.225000 audit[5851]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7ffd15147c60 a2=0 a3=7ffd15147c4c items=0 ppid=2051 pid=5851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:34.225000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:34.284996 sshd[5839]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:34.286000 audit[5839]: USER_END pid=5839 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.286000 audit[5839]: CRED_DISP pid=5839 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.289212 systemd[1]: Started sshd@16-10.0.0.142:22-10.0.0.1:58036.service. Jul 10 00:48:34.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.142:22-10.0.0.1:58036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:34.290028 systemd[1]: sshd@15-10.0.0.142:22-10.0.0.1:58030.service: Deactivated successfully. Jul 10 00:48:34.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.142:22-10.0.0.1:58030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:34.290642 systemd[1]: session-16.scope: Deactivated successfully. Jul 10 00:48:34.291255 systemd-logind[1190]: Session 16 logged out. Waiting for processes to exit. Jul 10 00:48:34.292161 systemd-logind[1190]: Removed session 16. Jul 10 00:48:34.326000 audit[5853]: USER_ACCT pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.327045 sshd[5853]: Accepted publickey for core from 10.0.0.1 port 58036 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:34.327000 audit[5853]: CRED_ACQ pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.327000 audit[5853]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffbb754d00 a2=3 a3=0 items=0 ppid=1 pid=5853 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:34.327000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:34.328808 sshd[5853]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:34.334137 systemd-logind[1190]: New session 17 of user core. Jul 10 00:48:34.335366 systemd[1]: Started session-17.scope. Jul 10 00:48:34.340000 audit[5853]: USER_START pid=5853 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.341000 audit[5856]: CRED_ACQ pid=5856 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.538245 systemd[1]: Started sshd@17-10.0.0.142:22-10.0.0.1:58050.service. Jul 10 00:48:34.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.142:22-10.0.0.1:58050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:34.543547 sshd[5853]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:34.543000 audit[5853]: USER_END pid=5853 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.543000 audit[5853]: CRED_DISP pid=5853 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.546005 systemd[1]: sshd@16-10.0.0.142:22-10.0.0.1:58036.service: Deactivated successfully. Jul 10 00:48:34.545000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.142:22-10.0.0.1:58036 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:34.546695 systemd[1]: session-17.scope: Deactivated successfully. Jul 10 00:48:34.547593 systemd-logind[1190]: Session 17 logged out. Waiting for processes to exit. Jul 10 00:48:34.548409 systemd-logind[1190]: Removed session 17. Jul 10 00:48:34.576004 kubelet[1944]: E0710 00:48:34.575935 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:34.583000 audit[5865]: USER_ACCT pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.584000 audit[5865]: CRED_ACQ pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.584000 audit[5865]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed810cbe0 a2=3 a3=0 items=0 ppid=1 pid=5865 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:34.584000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:34.585246 sshd[5865]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:34.591183 sshd[5865]: Accepted publickey for core from 10.0.0.1 port 58050 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:34.599947 systemd[1]: Started session-18.scope. Jul 10 00:48:34.601114 systemd-logind[1190]: New session 18 of user core. Jul 10 00:48:34.607000 audit[5865]: USER_START pid=5865 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.609000 audit[5868]: CRED_ACQ pid=5868 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:35.576955 kubelet[1944]: E0710 00:48:35.576907 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:36.408000 audit[5881]: NETFILTER_CFG table=filter:141 family=2 entries=22 op=nft_register_rule pid=5881 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:36.408000 audit[5881]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffd6a3ae690 a2=0 a3=7ffd6a3ae67c items=0 ppid=2051 pid=5881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:36.408000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:36.412000 audit[5881]: NETFILTER_CFG table=nat:142 family=2 entries=24 op=nft_register_rule pid=5881 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:36.412000 audit[5881]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffd6a3ae690 a2=0 a3=0 items=0 ppid=2051 pid=5881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:36.412000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:36.419964 sshd[5865]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:36.421000 audit[5865]: USER_END pid=5865 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.421000 audit[5865]: CRED_DISP pid=5865 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.423000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.142:22-10.0.0.1:58060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:36.424436 systemd[1]: Started sshd@18-10.0.0.142:22-10.0.0.1:58060.service. Jul 10 00:48:36.426605 systemd[1]: sshd@17-10.0.0.142:22-10.0.0.1:58050.service: Deactivated successfully. Jul 10 00:48:36.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.142:22-10.0.0.1:58050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:36.427192 systemd[1]: session-18.scope: Deactivated successfully. Jul 10 00:48:36.428345 systemd-logind[1190]: Session 18 logged out. Waiting for processes to exit. Jul 10 00:48:36.429682 systemd-logind[1190]: Removed session 18. Jul 10 00:48:36.451000 audit[5887]: NETFILTER_CFG table=filter:143 family=2 entries=34 op=nft_register_rule pid=5887 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:36.451000 audit[5887]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffdcdac97e0 a2=0 a3=7ffdcdac97cc items=0 ppid=2051 pid=5887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:36.451000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:36.455000 audit[5887]: NETFILTER_CFG table=nat:144 family=2 entries=24 op=nft_register_rule pid=5887 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:36.455000 audit[5887]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffdcdac97e0 a2=0 a3=0 items=0 ppid=2051 pid=5887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:36.455000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:36.465000 audit[5883]: USER_ACCT pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.466552 sshd[5883]: Accepted publickey for core from 10.0.0.1 port 58060 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:36.466000 audit[5883]: CRED_ACQ pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.466000 audit[5883]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd71c71ef0 a2=3 a3=0 items=0 ppid=1 pid=5883 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:36.466000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:36.467646 sshd[5883]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:36.471446 systemd-logind[1190]: New session 19 of user core. Jul 10 00:48:36.472286 systemd[1]: Started session-19.scope. Jul 10 00:48:36.475000 audit[5883]: USER_START pid=5883 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.477000 audit[5888]: CRED_ACQ pid=5888 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.861948 sshd[5883]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:36.862000 audit[5883]: USER_END pid=5883 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.862000 audit[5883]: CRED_DISP pid=5883 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.862000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.142:22-10.0.0.1:58064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:36.864000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.142:22-10.0.0.1:58060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:36.862971 systemd[1]: Started sshd@19-10.0.0.142:22-10.0.0.1:58064.service. Jul 10 00:48:36.864537 systemd[1]: sshd@18-10.0.0.142:22-10.0.0.1:58060.service: Deactivated successfully. Jul 10 00:48:36.865184 systemd[1]: session-19.scope: Deactivated successfully. Jul 10 00:48:36.865978 systemd-logind[1190]: Session 19 logged out. Waiting for processes to exit. Jul 10 00:48:36.867237 systemd-logind[1190]: Removed session 19. Jul 10 00:48:36.899000 audit[5897]: USER_ACCT pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.900442 sshd[5897]: Accepted publickey for core from 10.0.0.1 port 58064 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:36.900000 audit[5897]: CRED_ACQ pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.900000 audit[5897]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfc523d40 a2=3 a3=0 items=0 ppid=1 pid=5897 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:36.900000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:36.901893 sshd[5897]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:36.905479 systemd-logind[1190]: New session 20 of user core. Jul 10 00:48:36.906470 systemd[1]: Started session-20.scope. Jul 10 00:48:36.909000 audit[5897]: USER_START pid=5897 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:36.910000 audit[5900]: CRED_ACQ pid=5900 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:37.008312 sshd[5897]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:37.007000 audit[5897]: USER_END pid=5897 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:37.007000 audit[5897]: CRED_DISP pid=5897 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:37.010915 systemd[1]: sshd@19-10.0.0.142:22-10.0.0.1:58064.service: Deactivated successfully. Jul 10 00:48:37.011815 systemd[1]: session-20.scope: Deactivated successfully. Jul 10 00:48:37.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.142:22-10.0.0.1:58064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:37.012547 systemd-logind[1190]: Session 20 logged out. Waiting for processes to exit. Jul 10 00:48:37.013247 systemd-logind[1190]: Removed session 20. Jul 10 00:48:38.497000 audit[5932]: NETFILTER_CFG table=filter:145 family=2 entries=33 op=nft_register_rule pid=5932 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:38.497000 audit[5932]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffc82e7a930 a2=0 a3=7ffc82e7a91c items=0 ppid=2051 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:38.497000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:38.501000 audit[5932]: NETFILTER_CFG table=nat:146 family=2 entries=31 op=nft_register_chain pid=5932 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:38.501000 audit[5932]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffc82e7a930 a2=0 a3=7ffc82e7a91c items=0 ppid=2051 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:38.501000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:42.012761 systemd[1]: Started sshd@20-10.0.0.142:22-10.0.0.1:34944.service. Jul 10 00:48:42.018826 kernel: kauditd_printk_skb: 69 callbacks suppressed Jul 10 00:48:42.018875 kernel: audit: type=1130 audit(1752108522.011:1626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.142:22-10.0.0.1:34944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:42.011000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.142:22-10.0.0.1:34944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:42.052000 audit[5934]: USER_ACCT pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.053845 sshd[5934]: Accepted publickey for core from 10.0.0.1 port 34944 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:42.057727 kernel: audit: type=1101 audit(1752108522.052:1627): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.057766 kernel: audit: type=1103 audit(1752108522.055:1628): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.055000 audit[5934]: CRED_ACQ pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.058057 sshd[5934]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:42.061466 systemd-logind[1190]: New session 21 of user core. Jul 10 00:48:42.062281 systemd[1]: Started session-21.scope. Jul 10 00:48:42.063386 kernel: audit: type=1006 audit(1752108522.056:1629): pid=5934 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 10 00:48:42.063450 kernel: audit: type=1300 audit(1752108522.056:1629): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff34e7fca0 a2=3 a3=0 items=0 ppid=1 pid=5934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:42.056000 audit[5934]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff34e7fca0 a2=3 a3=0 items=0 ppid=1 pid=5934 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:42.067212 kernel: audit: type=1327 audit(1752108522.056:1629): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:42.056000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:42.065000 audit[5934]: USER_START pid=5934 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.072511 kernel: audit: type=1105 audit(1752108522.065:1630): pid=5934 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.072556 kernel: audit: type=1103 audit(1752108522.067:1631): pid=5936 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.067000 audit[5936]: CRED_ACQ pid=5936 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.197556 sshd[5934]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:42.196000 audit[5934]: USER_END pid=5934 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.200213 systemd[1]: sshd@20-10.0.0.142:22-10.0.0.1:34944.service: Deactivated successfully. Jul 10 00:48:42.200987 systemd[1]: session-21.scope: Deactivated successfully. Jul 10 00:48:42.201592 systemd-logind[1190]: Session 21 logged out. Waiting for processes to exit. Jul 10 00:48:42.202386 systemd-logind[1190]: Removed session 21. Jul 10 00:48:42.196000 audit[5934]: CRED_DISP pid=5934 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.206312 kernel: audit: type=1106 audit(1752108522.196:1632): pid=5934 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.206368 kernel: audit: type=1104 audit(1752108522.196:1633): pid=5934 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:42.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.142:22-10.0.0.1:34944 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:42.266000 audit[5947]: NETFILTER_CFG table=filter:147 family=2 entries=20 op=nft_register_rule pid=5947 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:42.266000 audit[5947]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe9b7bab30 a2=0 a3=7ffe9b7bab1c items=0 ppid=2051 pid=5947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:42.266000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:42.273000 audit[5947]: NETFILTER_CFG table=nat:148 family=2 entries=110 op=nft_register_chain pid=5947 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:42.273000 audit[5947]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffe9b7bab30 a2=0 a3=7ffe9b7bab1c items=0 ppid=2051 pid=5947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:42.273000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:44.332000 audit[5956]: NETFILTER_CFG table=filter:149 family=2 entries=8 op=nft_register_rule pid=5956 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:44.332000 audit[5956]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffedce9e690 a2=0 a3=7ffedce9e67c items=0 ppid=2051 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:44.332000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:44.339000 audit[5956]: NETFILTER_CFG table=nat:150 family=2 entries=68 op=nft_register_chain pid=5956 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:44.339000 audit[5956]: SYSCALL arch=c000003e syscall=46 success=yes exit=23876 a0=3 a1=7ffedce9e690 a2=0 a3=7ffedce9e67c items=0 ppid=2051 pid=5956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:44.339000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:44.348353 env[1202]: time="2025-07-10T00:48:44.348319770Z" level=info msg="StopContainer for \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\" with timeout 30 (s)" Jul 10 00:48:44.349058 env[1202]: time="2025-07-10T00:48:44.349037350Z" level=info msg="Stop container \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\" with signal terminated" Jul 10 00:48:44.356000 audit[5963]: NETFILTER_CFG table=filter:151 family=2 entries=8 op=nft_register_rule pid=5963 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:44.356000 audit[5963]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffec9d05aa0 a2=0 a3=7ffec9d05a8c items=0 ppid=2051 pid=5963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:44.356000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:44.357000 audit: BPF prog-id=213 op=UNLOAD Jul 10 00:48:44.359232 systemd[1]: cri-containerd-436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef.scope: Deactivated successfully. Jul 10 00:48:44.359505 systemd[1]: cri-containerd-436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef.scope: Consumed 1.042s CPU time. Jul 10 00:48:44.362000 audit: BPF prog-id=216 op=UNLOAD Jul 10 00:48:44.366000 audit[5963]: NETFILTER_CFG table=nat:152 family=2 entries=68 op=nft_unregister_chain pid=5963 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:44.366000 audit[5963]: SYSCALL arch=c000003e syscall=46 success=yes exit=22116 a0=3 a1=7ffec9d05aa0 a2=0 a3=7ffec9d05a8c items=0 ppid=2051 pid=5963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:44.366000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:44.377803 env[1202]: time="2025-07-10T00:48:44.377753618Z" level=info msg="shim disconnected" id=436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef Jul 10 00:48:44.377803 env[1202]: time="2025-07-10T00:48:44.377801339Z" level=warning msg="cleaning up after shim disconnected" id=436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef namespace=k8s.io Jul 10 00:48:44.377915 env[1202]: time="2025-07-10T00:48:44.377810897Z" level=info msg="cleaning up dead shim" Jul 10 00:48:44.378275 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef-rootfs.mount: Deactivated successfully. Jul 10 00:48:44.384234 env[1202]: time="2025-07-10T00:48:44.384197372Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:48:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5977 runtime=io.containerd.runc.v2\n" Jul 10 00:48:44.410172 env[1202]: time="2025-07-10T00:48:44.410121964Z" level=info msg="StopContainer for \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\" returns successfully" Jul 10 00:48:44.411877 env[1202]: time="2025-07-10T00:48:44.411841204Z" level=info msg="StopPodSandbox for \"008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa\"" Jul 10 00:48:44.412050 env[1202]: time="2025-07-10T00:48:44.412002040Z" level=info msg="Container to stop \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 10 00:48:44.414890 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa-shm.mount: Deactivated successfully. Jul 10 00:48:44.418210 systemd[1]: cri-containerd-008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa.scope: Deactivated successfully. Jul 10 00:48:44.416000 audit: BPF prog-id=209 op=UNLOAD Jul 10 00:48:44.421000 audit: BPF prog-id=212 op=UNLOAD Jul 10 00:48:44.433524 env[1202]: time="2025-07-10T00:48:44.433479538Z" level=info msg="shim disconnected" id=008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa Jul 10 00:48:44.433524 env[1202]: time="2025-07-10T00:48:44.433521047Z" level=warning msg="cleaning up after shim disconnected" id=008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa namespace=k8s.io Jul 10 00:48:44.433656 env[1202]: time="2025-07-10T00:48:44.433529894Z" level=info msg="cleaning up dead shim" Jul 10 00:48:44.435424 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa-rootfs.mount: Deactivated successfully. Jul 10 00:48:44.439896 env[1202]: time="2025-07-10T00:48:44.439851354Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:48:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6009 runtime=io.containerd.runc.v2\n" Jul 10 00:48:44.495215 systemd-networkd[1019]: cali52fe2fd730f: Link DOWN Jul 10 00:48:44.495222 systemd-networkd[1019]: cali52fe2fd730f: Lost carrier Jul 10 00:48:44.507000 audit[6045]: NETFILTER_CFG table=filter:153 family=2 entries=55 op=nft_register_rule pid=6045 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:44.507000 audit[6045]: SYSCALL arch=c000003e syscall=46 success=yes exit=8944 a0=3 a1=7ffc53af42b0 a2=0 a3=7ffc53af429c items=0 ppid=3462 pid=6045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:44.507000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:44.507000 audit[6045]: NETFILTER_CFG table=filter:154 family=2 entries=2 op=nft_unregister_chain pid=6045 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:48:44.507000 audit[6045]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc53af42b0 a2=0 a3=55ead9abb000 items=0 ppid=3462 pid=6045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:44.507000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.492 [INFO][6032] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.492 [INFO][6032] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" iface="eth0" netns="/var/run/netns/cni-51a64e5c-2eed-66cc-3620-4fd14202211f" Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.493 [INFO][6032] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" iface="eth0" netns="/var/run/netns/cni-51a64e5c-2eed-66cc-3620-4fd14202211f" Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.515 [INFO][6032] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" after=22.863532ms iface="eth0" netns="/var/run/netns/cni-51a64e5c-2eed-66cc-3620-4fd14202211f" Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.515 [INFO][6032] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.515 [INFO][6032] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.536 [INFO][6047] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" HandleID="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.536 [INFO][6047] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.536 [INFO][6047] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.564 [INFO][6047] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" HandleID="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.564 [INFO][6047] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" HandleID="k8s-pod-network.008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Workload="localhost-k8s-calico--apiserver--6f4f84749--ccnrs-eth0" Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.566 [INFO][6047] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:44.570000 env[1202]: 2025-07-10 00:48:44.567 [INFO][6032] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa" Jul 10 00:48:44.570619 env[1202]: time="2025-07-10T00:48:44.570296842Z" level=info msg="TearDown network for sandbox \"008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa\" successfully" Jul 10 00:48:44.570619 env[1202]: time="2025-07-10T00:48:44.570330216Z" level=info msg="StopPodSandbox for \"008095fd2d06cf74fee43d647e242504bd3210b22a8af70ee4651a5230cfc8aa\" returns successfully" Jul 10 00:48:44.572959 systemd[1]: run-netns-cni\x2d51a64e5c\x2d2eed\x2d66cc\x2d3620\x2d4fd14202211f.mount: Deactivated successfully. Jul 10 00:48:44.680673 kubelet[1944]: I0710 00:48:44.680560 1944 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/2883d529-10fa-4514-a96f-6c1f5ac98c7c-calico-apiserver-certs\") pod \"2883d529-10fa-4514-a96f-6c1f5ac98c7c\" (UID: \"2883d529-10fa-4514-a96f-6c1f5ac98c7c\") " Jul 10 00:48:44.680673 kubelet[1944]: I0710 00:48:44.680638 1944 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-lmkgn\" (UniqueName: \"kubernetes.io/projected/2883d529-10fa-4514-a96f-6c1f5ac98c7c-kube-api-access-lmkgn\") pod \"2883d529-10fa-4514-a96f-6c1f5ac98c7c\" (UID: \"2883d529-10fa-4514-a96f-6c1f5ac98c7c\") " Jul 10 00:48:44.687948 systemd[1]: var-lib-kubelet-pods-2883d529\x2d10fa\x2d4514\x2da96f\x2d6c1f5ac98c7c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dlmkgn.mount: Deactivated successfully. Jul 10 00:48:44.688054 systemd[1]: var-lib-kubelet-pods-2883d529\x2d10fa\x2d4514\x2da96f\x2d6c1f5ac98c7c-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 10 00:48:44.689113 kubelet[1944]: I0710 00:48:44.688384 1944 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/2883d529-10fa-4514-a96f-6c1f5ac98c7c-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "2883d529-10fa-4514-a96f-6c1f5ac98c7c" (UID: "2883d529-10fa-4514-a96f-6c1f5ac98c7c"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 10 00:48:44.689113 kubelet[1944]: I0710 00:48:44.688316 1944 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/2883d529-10fa-4514-a96f-6c1f5ac98c7c-kube-api-access-lmkgn" (OuterVolumeSpecName: "kube-api-access-lmkgn") pod "2883d529-10fa-4514-a96f-6c1f5ac98c7c" (UID: "2883d529-10fa-4514-a96f-6c1f5ac98c7c"). InnerVolumeSpecName "kube-api-access-lmkgn". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 10 00:48:44.781846 kubelet[1944]: I0710 00:48:44.781805 1944 reconciler_common.go:293] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/2883d529-10fa-4514-a96f-6c1f5ac98c7c-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 10 00:48:44.781846 kubelet[1944]: I0710 00:48:44.781843 1944 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-lmkgn\" (UniqueName: \"kubernetes.io/projected/2883d529-10fa-4514-a96f-6c1f5ac98c7c-kube-api-access-lmkgn\") on node \"localhost\" DevicePath \"\"" Jul 10 00:48:44.915960 kubelet[1944]: I0710 00:48:44.915915 1944 scope.go:117] "RemoveContainer" containerID="436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef" Jul 10 00:48:44.917077 env[1202]: time="2025-07-10T00:48:44.917034064Z" level=info msg="RemoveContainer for \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\"" Jul 10 00:48:44.917277 systemd[1]: Removed slice kubepods-besteffort-pod2883d529_10fa_4514_a96f_6c1f5ac98c7c.slice. Jul 10 00:48:44.917377 systemd[1]: kubepods-besteffort-pod2883d529_10fa_4514_a96f_6c1f5ac98c7c.slice: Consumed 1.068s CPU time. Jul 10 00:48:44.921109 env[1202]: time="2025-07-10T00:48:44.921066027Z" level=info msg="RemoveContainer for \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\" returns successfully" Jul 10 00:48:44.922681 kubelet[1944]: I0710 00:48:44.922649 1944 scope.go:117] "RemoveContainer" containerID="436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef" Jul 10 00:48:44.922941 env[1202]: time="2025-07-10T00:48:44.922868216Z" level=error msg="ContainerStatus for \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\": not found" Jul 10 00:48:44.923920 kubelet[1944]: E0710 00:48:44.923846 1944 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\": not found" containerID="436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef" Jul 10 00:48:44.925594 kubelet[1944]: I0710 00:48:44.925559 1944 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef"} err="failed to get container status \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\": rpc error: code = NotFound desc = an error occurred when try to find container \"436de34894496efd75eb776983b06d02e3c00f9180935a8e5217e06888d0eeef\": not found" Jul 10 00:48:45.378000 audit[6078]: NETFILTER_CFG table=filter:155 family=2 entries=8 op=nft_register_rule pid=6078 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:45.378000 audit[6078]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffa1d75bb0 a2=0 a3=7fffa1d75b9c items=0 ppid=2051 pid=6078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:45.378000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:45.384000 audit[6078]: NETFILTER_CFG table=nat:156 family=2 entries=64 op=nft_register_rule pid=6078 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:45.384000 audit[6078]: SYSCALL arch=c000003e syscall=46 success=yes exit=21988 a0=3 a1=7fffa1d75bb0 a2=0 a3=7fffa1d75b9c items=0 ppid=2051 pid=6078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:45.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:45.577369 kubelet[1944]: I0710 00:48:45.577318 1944 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="2883d529-10fa-4514-a96f-6c1f5ac98c7c" path="/var/lib/kubelet/pods/2883d529-10fa-4514-a96f-6c1f5ac98c7c/volumes" Jul 10 00:48:46.575523 kubelet[1944]: E0710 00:48:46.575474 1944 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:47.202492 systemd[1]: Started sshd@21-10.0.0.142:22-10.0.0.1:34956.service. Jul 10 00:48:47.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.142:22-10.0.0.1:34956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:47.203824 kernel: kauditd_printk_skb: 35 callbacks suppressed Jul 10 00:48:47.203874 kernel: audit: type=1130 audit(1752108527.201:1649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.142:22-10.0.0.1:34956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:47.241000 audit[6080]: USER_ACCT pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.242697 sshd[6080]: Accepted publickey for core from 10.0.0.1 port 34956 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:47.245264 sshd[6080]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:47.244000 audit[6080]: CRED_ACQ pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.249774 kernel: audit: type=1101 audit(1752108527.241:1650): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.250014 kernel: audit: type=1103 audit(1752108527.244:1651): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.250174 kernel: audit: type=1006 audit(1752108527.244:1652): pid=6080 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 10 00:48:47.249903 systemd[1]: Started session-22.scope. Jul 10 00:48:47.250933 systemd-logind[1190]: New session 22 of user core. Jul 10 00:48:47.255841 kernel: audit: type=1300 audit(1752108527.244:1652): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe535171d0 a2=3 a3=0 items=0 ppid=1 pid=6080 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:47.244000 audit[6080]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe535171d0 a2=3 a3=0 items=0 ppid=1 pid=6080 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:47.244000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:47.257454 kernel: audit: type=1327 audit(1752108527.244:1652): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:47.257509 kernel: audit: type=1105 audit(1752108527.254:1653): pid=6080 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.254000 audit[6080]: USER_START pid=6080 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.256000 audit[6082]: CRED_ACQ pid=6082 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.265079 kernel: audit: type=1103 audit(1752108527.256:1654): pid=6082 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.375443 sshd[6080]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:47.375000 audit[6080]: USER_END pid=6080 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.378619 systemd[1]: sshd@21-10.0.0.142:22-10.0.0.1:34956.service: Deactivated successfully. Jul 10 00:48:47.379423 systemd[1]: session-22.scope: Deactivated successfully. Jul 10 00:48:47.380039 systemd-logind[1190]: Session 22 logged out. Waiting for processes to exit. Jul 10 00:48:47.380884 systemd-logind[1190]: Removed session 22. Jul 10 00:48:47.376000 audit[6080]: CRED_DISP pid=6080 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.384551 kernel: audit: type=1106 audit(1752108527.375:1655): pid=6080 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.384604 kernel: audit: type=1104 audit(1752108527.376:1656): pid=6080 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:47.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.142:22-10.0.0.1:34956 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:52.380302 systemd[1]: Started sshd@22-10.0.0.142:22-10.0.0.1:32828.service. Jul 10 00:48:52.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.142:22-10.0.0.1:32828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:52.381400 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:48:52.381452 kernel: audit: type=1130 audit(1752108532.379:1658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.142:22-10.0.0.1:32828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:52.416000 audit[6116]: USER_ACCT pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.416868 sshd[6116]: Accepted publickey for core from 10.0.0.1 port 32828 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:52.419147 sshd[6116]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:52.418000 audit[6116]: CRED_ACQ pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.423247 systemd-logind[1190]: New session 23 of user core. Jul 10 00:48:52.423930 kernel: audit: type=1101 audit(1752108532.416:1659): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.423966 kernel: audit: type=1103 audit(1752108532.418:1660): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.423984 kernel: audit: type=1006 audit(1752108532.418:1661): pid=6116 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 10 00:48:52.424095 systemd[1]: Started session-23.scope. Jul 10 00:48:52.418000 audit[6116]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd2227270 a2=3 a3=0 items=0 ppid=1 pid=6116 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:52.429872 kernel: audit: type=1300 audit(1752108532.418:1661): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd2227270 a2=3 a3=0 items=0 ppid=1 pid=6116 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:52.430540 kernel: audit: type=1327 audit(1752108532.418:1661): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:52.418000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:52.428000 audit[6116]: USER_START pid=6116 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.435833 kernel: audit: type=1105 audit(1752108532.428:1662): pid=6116 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.435880 kernel: audit: type=1103 audit(1752108532.429:1663): pid=6118 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.429000 audit[6118]: CRED_ACQ pid=6118 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.529103 sshd[6116]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:52.529000 audit[6116]: USER_END pid=6116 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.531651 systemd[1]: sshd@22-10.0.0.142:22-10.0.0.1:32828.service: Deactivated successfully. Jul 10 00:48:52.532401 systemd[1]: session-23.scope: Deactivated successfully. Jul 10 00:48:52.533301 systemd-logind[1190]: Session 23 logged out. Waiting for processes to exit. Jul 10 00:48:52.533974 systemd-logind[1190]: Removed session 23. Jul 10 00:48:52.529000 audit[6116]: CRED_DISP pid=6116 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.537528 kernel: audit: type=1106 audit(1752108532.529:1664): pid=6116 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.537586 kernel: audit: type=1104 audit(1752108532.529:1665): pid=6116 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:52.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.142:22-10.0.0.1:32828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:57.534114 systemd[1]: Started sshd@23-10.0.0.142:22-10.0.0.1:32838.service. Jul 10 00:48:57.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.142:22-10.0.0.1:32838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:57.535163 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:48:57.535239 kernel: audit: type=1130 audit(1752108537.533:1667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.142:22-10.0.0.1:32838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:57.572000 audit[6131]: USER_ACCT pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.573364 sshd[6131]: Accepted publickey for core from 10.0.0.1 port 32838 ssh2: RSA SHA256:suUhWV759MqU0C+Dl6JG8TPW8PqnqlsB4qushdi9Ejw Jul 10 00:48:57.576000 audit[6131]: CRED_ACQ pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.577681 sshd[6131]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:57.580806 kernel: audit: type=1101 audit(1752108537.572:1668): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.580863 kernel: audit: type=1103 audit(1752108537.576:1669): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.580885 kernel: audit: type=1006 audit(1752108537.576:1670): pid=6131 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 10 00:48:57.581474 systemd-logind[1190]: New session 24 of user core. Jul 10 00:48:57.582315 systemd[1]: Started session-24.scope. Jul 10 00:48:57.576000 audit[6131]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc83815bc0 a2=3 a3=0 items=0 ppid=1 pid=6131 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:57.586833 kernel: audit: type=1300 audit(1752108537.576:1670): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc83815bc0 a2=3 a3=0 items=0 ppid=1 pid=6131 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:57.586880 kernel: audit: type=1327 audit(1752108537.576:1670): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:57.576000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:57.586000 audit[6131]: USER_START pid=6131 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.592084 kernel: audit: type=1105 audit(1752108537.586:1671): pid=6131 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.592139 kernel: audit: type=1103 audit(1752108537.587:1672): pid=6133 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.587000 audit[6133]: CRED_ACQ pid=6133 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.753666 sshd[6131]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:57.753000 audit[6131]: USER_END pid=6131 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.755905 systemd[1]: sshd@23-10.0.0.142:22-10.0.0.1:32838.service: Deactivated successfully. Jul 10 00:48:57.756691 systemd[1]: session-24.scope: Deactivated successfully. Jul 10 00:48:57.757285 systemd-logind[1190]: Session 24 logged out. Waiting for processes to exit. Jul 10 00:48:57.758020 systemd-logind[1190]: Removed session 24. Jul 10 00:48:57.754000 audit[6131]: CRED_DISP pid=6131 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.762117 kernel: audit: type=1106 audit(1752108537.753:1673): pid=6131 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.762173 kernel: audit: type=1104 audit(1752108537.754:1674): pid=6131 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:57.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.142:22-10.0.0.1:32838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'