Jul 10 00:37:50.855162 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Wed Jul 9 23:09:45 -00 2025 Jul 10 00:37:50.855180 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:37:50.855189 kernel: BIOS-provided physical RAM map: Jul 10 00:37:50.855195 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 10 00:37:50.855200 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 10 00:37:50.855205 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 10 00:37:50.855212 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Jul 10 00:37:50.855217 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 10 00:37:50.855223 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 10 00:37:50.855243 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 10 00:37:50.855248 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Jul 10 00:37:50.855254 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 10 00:37:50.855259 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 10 00:37:50.855265 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 10 00:37:50.855272 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 10 00:37:50.855279 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 10 00:37:50.855285 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 10 00:37:50.855291 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 10 00:37:50.855296 kernel: NX (Execute Disable) protection: active Jul 10 00:37:50.855302 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Jul 10 00:37:50.855309 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Jul 10 00:37:50.855314 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Jul 10 00:37:50.855320 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Jul 10 00:37:50.855326 kernel: extended physical RAM map: Jul 10 00:37:50.855332 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 10 00:37:50.855350 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 10 00:37:50.855356 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 10 00:37:50.855362 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Jul 10 00:37:50.855368 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 10 00:37:50.855374 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 10 00:37:50.855380 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 10 00:37:50.855386 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b438017] usable Jul 10 00:37:50.855391 kernel: reserve setup_data: [mem 0x000000009b438018-0x000000009b474e57] usable Jul 10 00:37:50.855397 kernel: reserve setup_data: [mem 0x000000009b474e58-0x000000009b475017] usable Jul 10 00:37:50.855403 kernel: reserve setup_data: [mem 0x000000009b475018-0x000000009b47ec57] usable Jul 10 00:37:50.855409 kernel: reserve setup_data: [mem 0x000000009b47ec58-0x000000009c8eefff] usable Jul 10 00:37:50.855416 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 10 00:37:50.855433 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 10 00:37:50.855439 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 10 00:37:50.855445 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 10 00:37:50.855454 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 10 00:37:50.855460 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 10 00:37:50.855467 kernel: reserve setup_data: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 10 00:37:50.855475 kernel: efi: EFI v2.70 by EDK II Jul 10 00:37:50.855481 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b673018 RNG=0x9cb73018 Jul 10 00:37:50.855487 kernel: random: crng init done Jul 10 00:37:50.855494 kernel: SMBIOS 2.8 present. Jul 10 00:37:50.855507 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Jul 10 00:37:50.855518 kernel: Hypervisor detected: KVM Jul 10 00:37:50.855524 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 10 00:37:50.855531 kernel: kvm-clock: cpu 0, msr 3319a001, primary cpu clock Jul 10 00:37:50.855537 kernel: kvm-clock: using sched offset of 3953669191 cycles Jul 10 00:37:50.855545 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 10 00:37:50.855552 kernel: tsc: Detected 2794.746 MHz processor Jul 10 00:37:50.855559 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 10 00:37:50.855565 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 10 00:37:50.855583 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Jul 10 00:37:50.855590 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 10 00:37:50.855597 kernel: Using GB pages for direct mapping Jul 10 00:37:50.855603 kernel: Secure boot disabled Jul 10 00:37:50.855610 kernel: ACPI: Early table checksum verification disabled Jul 10 00:37:50.855618 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Jul 10 00:37:50.855638 kernel: ACPI: XSDT 0x000000009CB7D0E8 000054 (v01 BOCHS BXPC 00000001 01000013) Jul 10 00:37:50.855649 kernel: ACPI: FACP 0x000000009CB79000 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:37:50.855656 kernel: ACPI: DSDT 0x000000009CB7A000 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:37:50.855662 kernel: ACPI: FACS 0x000000009CBDD000 000040 Jul 10 00:37:50.855679 kernel: ACPI: APIC 0x000000009CB78000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:37:50.855686 kernel: ACPI: HPET 0x000000009CB77000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:37:50.855692 kernel: ACPI: MCFG 0x000000009CB76000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:37:50.855706 kernel: ACPI: WAET 0x000000009CB75000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:37:50.855719 kernel: ACPI: BGRT 0x000000009CB74000 000038 (v01 INTEL EDK2 00000002 01000013) Jul 10 00:37:50.855726 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb79000-0x9cb790f3] Jul 10 00:37:50.855732 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7a000-0x9cb7c1b9] Jul 10 00:37:50.855739 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Jul 10 00:37:50.855745 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb78000-0x9cb7808f] Jul 10 00:37:50.855752 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb77000-0x9cb77037] Jul 10 00:37:50.855770 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cb76000-0x9cb7603b] Jul 10 00:37:50.855776 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb75000-0x9cb75027] Jul 10 00:37:50.855783 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb74000-0x9cb74037] Jul 10 00:37:50.855790 kernel: No NUMA configuration found Jul 10 00:37:50.855797 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Jul 10 00:37:50.855803 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Jul 10 00:37:50.855821 kernel: Zone ranges: Jul 10 00:37:50.855828 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 10 00:37:50.855834 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Jul 10 00:37:50.855841 kernel: Normal empty Jul 10 00:37:50.855847 kernel: Movable zone start for each node Jul 10 00:37:50.855853 kernel: Early memory node ranges Jul 10 00:37:50.855872 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Jul 10 00:37:50.855880 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Jul 10 00:37:50.855888 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Jul 10 00:37:50.855895 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Jul 10 00:37:50.855912 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Jul 10 00:37:50.855926 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Jul 10 00:37:50.855937 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Jul 10 00:37:50.855943 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 10 00:37:50.855950 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Jul 10 00:37:50.855956 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Jul 10 00:37:50.855964 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 10 00:37:50.855982 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Jul 10 00:37:50.855989 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Jul 10 00:37:50.855995 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Jul 10 00:37:50.856002 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 10 00:37:50.856008 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 10 00:37:50.856014 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 10 00:37:50.856021 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 10 00:37:50.856027 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 10 00:37:50.856046 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 10 00:37:50.856053 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 10 00:37:50.856059 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 10 00:37:50.856066 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 10 00:37:50.856072 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 10 00:37:50.856078 kernel: TSC deadline timer available Jul 10 00:37:50.856085 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 10 00:37:50.856091 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 10 00:37:50.856109 kernel: kvm-guest: setup PV sched yield Jul 10 00:37:50.856117 kernel: [mem 0xc0000000-0xffffffff] available for PCI devices Jul 10 00:37:50.856124 kernel: Booting paravirtualized kernel on KVM Jul 10 00:37:50.856135 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 10 00:37:50.856143 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 10 00:37:50.856157 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 10 00:37:50.856168 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 10 00:37:50.856175 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 10 00:37:50.856182 kernel: kvm-guest: setup async PF for cpu 0 Jul 10 00:37:50.856189 kernel: kvm-guest: stealtime: cpu 0, msr 9b21c0c0 Jul 10 00:37:50.856195 kernel: kvm-guest: PV spinlocks enabled Jul 10 00:37:50.856203 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 10 00:37:50.856209 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Jul 10 00:37:50.856230 kernel: Policy zone: DMA32 Jul 10 00:37:50.856238 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:37:50.856245 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 10 00:37:50.856252 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 10 00:37:50.856260 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 10 00:37:50.856267 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 10 00:37:50.856286 kernel: Memory: 2397432K/2567000K available (12295K kernel code, 2275K rwdata, 13724K rodata, 47472K init, 4108K bss, 169308K reserved, 0K cma-reserved) Jul 10 00:37:50.856293 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 10 00:37:50.856300 kernel: ftrace: allocating 34602 entries in 136 pages Jul 10 00:37:50.856306 kernel: ftrace: allocated 136 pages with 2 groups Jul 10 00:37:50.856313 kernel: rcu: Hierarchical RCU implementation. Jul 10 00:37:50.856321 kernel: rcu: RCU event tracing is enabled. Jul 10 00:37:50.856339 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 10 00:37:50.856347 kernel: Rude variant of Tasks RCU enabled. Jul 10 00:37:50.856354 kernel: Tracing variant of Tasks RCU enabled. Jul 10 00:37:50.856361 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 10 00:37:50.856368 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 10 00:37:50.856386 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 10 00:37:50.856393 kernel: Console: colour dummy device 80x25 Jul 10 00:37:50.856400 kernel: printk: console [ttyS0] enabled Jul 10 00:37:50.856407 kernel: ACPI: Core revision 20210730 Jul 10 00:37:50.856414 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 10 00:37:50.856429 kernel: APIC: Switch to symmetric I/O mode setup Jul 10 00:37:50.856440 kernel: x2apic enabled Jul 10 00:37:50.856447 kernel: Switched APIC routing to physical x2apic. Jul 10 00:37:50.856454 kernel: kvm-guest: setup PV IPIs Jul 10 00:37:50.856461 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 10 00:37:50.856467 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 10 00:37:50.856474 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794746) Jul 10 00:37:50.856481 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 10 00:37:50.856488 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 10 00:37:50.856496 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 10 00:37:50.856503 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 10 00:37:50.856510 kernel: Spectre V2 : Mitigation: Retpolines Jul 10 00:37:50.856517 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 10 00:37:50.856523 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 10 00:37:50.856530 kernel: RETBleed: Mitigation: untrained return thunk Jul 10 00:37:50.856537 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 10 00:37:50.856544 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 10 00:37:50.856551 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 10 00:37:50.856559 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 10 00:37:50.856566 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 10 00:37:50.856573 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 10 00:37:50.856579 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 10 00:37:50.856586 kernel: Freeing SMP alternatives memory: 32K Jul 10 00:37:50.856593 kernel: pid_max: default: 32768 minimum: 301 Jul 10 00:37:50.856600 kernel: LSM: Security Framework initializing Jul 10 00:37:50.856606 kernel: SELinux: Initializing. Jul 10 00:37:50.856613 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:37:50.856621 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:37:50.856628 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 10 00:37:50.856635 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 10 00:37:50.856642 kernel: ... version: 0 Jul 10 00:37:50.856649 kernel: ... bit width: 48 Jul 10 00:37:50.856656 kernel: ... generic registers: 6 Jul 10 00:37:50.856662 kernel: ... value mask: 0000ffffffffffff Jul 10 00:37:50.856677 kernel: ... max period: 00007fffffffffff Jul 10 00:37:50.856683 kernel: ... fixed-purpose events: 0 Jul 10 00:37:50.856691 kernel: ... event mask: 000000000000003f Jul 10 00:37:50.856698 kernel: signal: max sigframe size: 1776 Jul 10 00:37:50.856705 kernel: rcu: Hierarchical SRCU implementation. Jul 10 00:37:50.856711 kernel: smp: Bringing up secondary CPUs ... Jul 10 00:37:50.856718 kernel: x86: Booting SMP configuration: Jul 10 00:37:50.856725 kernel: .... node #0, CPUs: #1 Jul 10 00:37:50.856732 kernel: kvm-clock: cpu 1, msr 3319a041, secondary cpu clock Jul 10 00:37:50.856739 kernel: kvm-guest: setup async PF for cpu 1 Jul 10 00:37:50.856746 kernel: kvm-guest: stealtime: cpu 1, msr 9b29c0c0 Jul 10 00:37:50.856753 kernel: #2 Jul 10 00:37:50.856760 kernel: kvm-clock: cpu 2, msr 3319a081, secondary cpu clock Jul 10 00:37:50.856767 kernel: kvm-guest: setup async PF for cpu 2 Jul 10 00:37:50.856773 kernel: kvm-guest: stealtime: cpu 2, msr 9b31c0c0 Jul 10 00:37:50.856780 kernel: #3 Jul 10 00:37:50.856787 kernel: kvm-clock: cpu 3, msr 3319a0c1, secondary cpu clock Jul 10 00:37:50.856793 kernel: kvm-guest: setup async PF for cpu 3 Jul 10 00:37:50.856800 kernel: kvm-guest: stealtime: cpu 3, msr 9b39c0c0 Jul 10 00:37:50.856807 kernel: smp: Brought up 1 node, 4 CPUs Jul 10 00:37:50.856814 kernel: smpboot: Max logical packages: 1 Jul 10 00:37:50.856822 kernel: smpboot: Total of 4 processors activated (22357.96 BogoMIPS) Jul 10 00:37:50.856828 kernel: devtmpfs: initialized Jul 10 00:37:50.856835 kernel: x86/mm: Memory block size: 128MB Jul 10 00:37:50.856842 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Jul 10 00:37:50.856849 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Jul 10 00:37:50.856856 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Jul 10 00:37:50.856863 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Jul 10 00:37:50.856870 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Jul 10 00:37:50.856878 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 10 00:37:50.856885 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 10 00:37:50.856891 kernel: pinctrl core: initialized pinctrl subsystem Jul 10 00:37:50.856898 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 10 00:37:50.856919 kernel: audit: initializing netlink subsys (disabled) Jul 10 00:37:50.856926 kernel: audit: type=2000 audit(1752107870.875:1): state=initialized audit_enabled=0 res=1 Jul 10 00:37:50.856933 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 10 00:37:50.856939 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 10 00:37:50.856946 kernel: cpuidle: using governor menu Jul 10 00:37:50.856954 kernel: ACPI: bus type PCI registered Jul 10 00:37:50.856961 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 10 00:37:50.856968 kernel: dca service started, version 1.12.1 Jul 10 00:37:50.856975 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 10 00:37:50.856982 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 10 00:37:50.856989 kernel: PCI: Using configuration type 1 for base access Jul 10 00:37:50.856995 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 10 00:37:50.857002 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 10 00:37:50.857009 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 10 00:37:50.857017 kernel: ACPI: Added _OSI(Module Device) Jul 10 00:37:50.857023 kernel: ACPI: Added _OSI(Processor Device) Jul 10 00:37:50.857030 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 10 00:37:50.857037 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 10 00:37:50.857044 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 10 00:37:50.857051 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 10 00:37:50.857058 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 10 00:37:50.857064 kernel: ACPI: Interpreter enabled Jul 10 00:37:50.857071 kernel: ACPI: PM: (supports S0 S3 S5) Jul 10 00:37:50.857078 kernel: ACPI: Using IOAPIC for interrupt routing Jul 10 00:37:50.857086 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 10 00:37:50.857093 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 10 00:37:50.857099 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 10 00:37:50.857216 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 10 00:37:50.857288 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 10 00:37:50.857355 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 10 00:37:50.857364 kernel: PCI host bridge to bus 0000:00 Jul 10 00:37:50.857437 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 10 00:37:50.857498 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 10 00:37:50.857558 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 10 00:37:50.857617 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 10 00:37:50.857685 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 10 00:37:50.857745 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0xfffffffff window] Jul 10 00:37:50.857804 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 10 00:37:50.857884 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 10 00:37:50.857974 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 10 00:37:50.858043 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Jul 10 00:37:50.858110 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xc1044000-0xc1044fff] Jul 10 00:37:50.858196 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Jul 10 00:37:50.858266 kernel: pci 0000:00:01.0: BAR 0: assigned to efifb Jul 10 00:37:50.858353 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 10 00:37:50.858981 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 10 00:37:50.859071 kernel: pci 0000:00:02.0: reg 0x10: [io 0x6100-0x611f] Jul 10 00:37:50.859141 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xc1043000-0xc1043fff] Jul 10 00:37:50.859210 kernel: pci 0000:00:02.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Jul 10 00:37:50.859285 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 10 00:37:50.859365 kernel: pci 0000:00:03.0: reg 0x10: [io 0x6000-0x607f] Jul 10 00:37:50.860446 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Jul 10 00:37:50.860524 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Jul 10 00:37:50.860602 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 10 00:37:50.860682 kernel: pci 0000:00:04.0: reg 0x10: [io 0x60e0-0x60ff] Jul 10 00:37:50.860751 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Jul 10 00:37:50.860816 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Jul 10 00:37:50.860883 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Jul 10 00:37:50.860994 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 10 00:37:50.861065 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 10 00:37:50.861137 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 10 00:37:50.861206 kernel: pci 0000:00:1f.2: reg 0x20: [io 0x60c0-0x60df] Jul 10 00:37:50.861272 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xc1040000-0xc1040fff] Jul 10 00:37:50.861355 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 10 00:37:50.861428 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x6080-0x60bf] Jul 10 00:37:50.861438 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 10 00:37:50.861445 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 10 00:37:50.861452 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 10 00:37:50.861459 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 10 00:37:50.861465 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 10 00:37:50.861472 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 10 00:37:50.861479 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 10 00:37:50.861486 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 10 00:37:50.861494 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 10 00:37:50.861501 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 10 00:37:50.861508 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 10 00:37:50.861514 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 10 00:37:50.861521 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 10 00:37:50.861528 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 10 00:37:50.861535 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 10 00:37:50.861542 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 10 00:37:50.861549 kernel: iommu: Default domain type: Translated Jul 10 00:37:50.861557 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 10 00:37:50.861624 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 10 00:37:50.861702 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 10 00:37:50.861769 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 10 00:37:50.861780 kernel: vgaarb: loaded Jul 10 00:37:50.861796 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 10 00:37:50.861806 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 10 00:37:50.861814 kernel: PTP clock support registered Jul 10 00:37:50.861827 kernel: Registered efivars operations Jul 10 00:37:50.861841 kernel: PCI: Using ACPI for IRQ routing Jul 10 00:37:50.861850 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 10 00:37:50.861859 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Jul 10 00:37:50.861867 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Jul 10 00:37:50.861874 kernel: e820: reserve RAM buffer [mem 0x9b438018-0x9bffffff] Jul 10 00:37:50.861880 kernel: e820: reserve RAM buffer [mem 0x9b475018-0x9bffffff] Jul 10 00:37:50.861887 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Jul 10 00:37:50.861893 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Jul 10 00:37:50.861915 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 10 00:37:50.861922 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 10 00:37:50.861929 kernel: clocksource: Switched to clocksource kvm-clock Jul 10 00:37:50.861936 kernel: VFS: Disk quotas dquot_6.6.0 Jul 10 00:37:50.861943 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 10 00:37:50.861950 kernel: pnp: PnP ACPI init Jul 10 00:37:50.862038 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 10 00:37:50.862048 kernel: pnp: PnP ACPI: found 6 devices Jul 10 00:37:50.862058 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 10 00:37:50.862065 kernel: NET: Registered PF_INET protocol family Jul 10 00:37:50.862072 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 10 00:37:50.862079 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 10 00:37:50.862086 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 10 00:37:50.862093 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 10 00:37:50.862100 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 10 00:37:50.862107 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 10 00:37:50.862114 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:37:50.862122 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:37:50.862129 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 10 00:37:50.862136 kernel: NET: Registered PF_XDP protocol family Jul 10 00:37:50.862221 kernel: pci 0000:00:04.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Jul 10 00:37:50.862293 kernel: pci 0000:00:04.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Jul 10 00:37:50.862391 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 10 00:37:50.862478 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 10 00:37:50.862539 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 10 00:37:50.862601 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 10 00:37:50.862660 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 10 00:37:50.862730 kernel: pci_bus 0000:00: resource 9 [mem 0x800000000-0xfffffffff window] Jul 10 00:37:50.862739 kernel: PCI: CLS 0 bytes, default 64 Jul 10 00:37:50.862746 kernel: Initialise system trusted keyrings Jul 10 00:37:50.862753 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 10 00:37:50.862760 kernel: Key type asymmetric registered Jul 10 00:37:50.862767 kernel: Asymmetric key parser 'x509' registered Jul 10 00:37:50.862774 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 10 00:37:50.862782 kernel: io scheduler mq-deadline registered Jul 10 00:37:50.862790 kernel: io scheduler kyber registered Jul 10 00:37:50.862806 kernel: io scheduler bfq registered Jul 10 00:37:50.862814 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 10 00:37:50.862822 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 10 00:37:50.862829 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 10 00:37:50.862836 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 10 00:37:50.862844 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 10 00:37:50.862851 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 10 00:37:50.862860 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 10 00:37:50.862867 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 10 00:37:50.862875 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 10 00:37:50.863023 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 10 00:37:50.863041 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 10 00:37:50.863107 kernel: rtc_cmos 00:04: registered as rtc0 Jul 10 00:37:50.863168 kernel: rtc_cmos 00:04: setting system clock to 2025-07-10T00:37:50 UTC (1752107870) Jul 10 00:37:50.863228 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 10 00:37:50.863242 kernel: efifb: probing for efifb Jul 10 00:37:50.863249 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Jul 10 00:37:50.863256 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Jul 10 00:37:50.863264 kernel: efifb: scrolling: redraw Jul 10 00:37:50.863271 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Jul 10 00:37:50.863278 kernel: Console: switching to colour frame buffer device 160x50 Jul 10 00:37:50.863285 kernel: fb0: EFI VGA frame buffer device Jul 10 00:37:50.863293 kernel: pstore: Registered efi as persistent store backend Jul 10 00:37:50.863300 kernel: NET: Registered PF_INET6 protocol family Jul 10 00:37:50.863311 kernel: Segment Routing with IPv6 Jul 10 00:37:50.863327 kernel: In-situ OAM (IOAM) with IPv6 Jul 10 00:37:50.863337 kernel: NET: Registered PF_PACKET protocol family Jul 10 00:37:50.863347 kernel: Key type dns_resolver registered Jul 10 00:37:50.863354 kernel: IPI shorthand broadcast: enabled Jul 10 00:37:50.863362 kernel: sched_clock: Marking stable (398187066, 118157409)->(562068992, -45724517) Jul 10 00:37:50.863370 kernel: registered taskstats version 1 Jul 10 00:37:50.863377 kernel: Loading compiled-in X.509 certificates Jul 10 00:37:50.863384 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: 6ebecdd7757c0df63fc51731f0b99957f4e4af16' Jul 10 00:37:50.863391 kernel: Key type .fscrypt registered Jul 10 00:37:50.863398 kernel: Key type fscrypt-provisioning registered Jul 10 00:37:50.863407 kernel: pstore: Using crash dump compression: deflate Jul 10 00:37:50.863414 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 10 00:37:50.863421 kernel: ima: Allocated hash algorithm: sha1 Jul 10 00:37:50.863430 kernel: ima: No architecture policies found Jul 10 00:37:50.863437 kernel: clk: Disabling unused clocks Jul 10 00:37:50.863444 kernel: Freeing unused kernel image (initmem) memory: 47472K Jul 10 00:37:50.863452 kernel: Write protecting the kernel read-only data: 28672k Jul 10 00:37:50.863459 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 10 00:37:50.863466 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K Jul 10 00:37:50.863473 kernel: Run /init as init process Jul 10 00:37:50.863481 kernel: with arguments: Jul 10 00:37:50.863488 kernel: /init Jul 10 00:37:50.863496 kernel: with environment: Jul 10 00:37:50.863503 kernel: HOME=/ Jul 10 00:37:50.863510 kernel: TERM=linux Jul 10 00:37:50.863517 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 10 00:37:50.863527 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:37:50.863536 systemd[1]: Detected virtualization kvm. Jul 10 00:37:50.863544 systemd[1]: Detected architecture x86-64. Jul 10 00:37:50.863552 systemd[1]: Running in initrd. Jul 10 00:37:50.863560 systemd[1]: No hostname configured, using default hostname. Jul 10 00:37:50.863567 systemd[1]: Hostname set to . Jul 10 00:37:50.863575 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:37:50.863583 systemd[1]: Queued start job for default target initrd.target. Jul 10 00:37:50.863590 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:37:50.863598 systemd[1]: Reached target cryptsetup.target. Jul 10 00:37:50.863605 systemd[1]: Reached target paths.target. Jul 10 00:37:50.863613 systemd[1]: Reached target slices.target. Jul 10 00:37:50.863620 systemd[1]: Reached target swap.target. Jul 10 00:37:50.863628 systemd[1]: Reached target timers.target. Jul 10 00:37:50.863636 systemd[1]: Listening on iscsid.socket. Jul 10 00:37:50.863644 systemd[1]: Listening on iscsiuio.socket. Jul 10 00:37:50.863651 systemd[1]: Listening on systemd-journald-audit.socket. Jul 10 00:37:50.863659 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 10 00:37:50.863677 systemd[1]: Listening on systemd-journald.socket. Jul 10 00:37:50.863684 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:37:50.863693 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:37:50.863701 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:37:50.863709 systemd[1]: Reached target sockets.target. Jul 10 00:37:50.863716 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:37:50.863725 systemd[1]: Finished network-cleanup.service. Jul 10 00:37:50.863733 systemd[1]: Starting systemd-fsck-usr.service... Jul 10 00:37:50.863740 systemd[1]: Starting systemd-journald.service... Jul 10 00:37:50.863748 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:37:50.863756 systemd[1]: Starting systemd-resolved.service... Jul 10 00:37:50.863764 systemd[1]: Starting systemd-vconsole-setup.service... Jul 10 00:37:50.863772 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:37:50.863779 systemd[1]: Finished systemd-fsck-usr.service. Jul 10 00:37:50.863787 systemd[1]: Finished systemd-vconsole-setup.service. Jul 10 00:37:50.863794 systemd[1]: Starting dracut-cmdline-ask.service... Jul 10 00:37:50.863802 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:37:50.863812 systemd-journald[197]: Journal started Jul 10 00:37:50.863854 systemd-journald[197]: Runtime Journal (/run/log/journal/4465c2bd64c94d789b17c1623d065a96) is 6.0M, max 48.4M, 42.4M free. Jul 10 00:37:50.868038 systemd[1]: Started systemd-journald.service. Jul 10 00:37:50.868086 kernel: audit: type=1130 audit(1752107870.864:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.847891 systemd-modules-load[198]: Inserted module 'overlay' Jul 10 00:37:50.864602 systemd-resolved[199]: Positive Trust Anchors: Jul 10 00:37:50.864610 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:37:50.864636 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:37:50.867227 systemd-resolved[199]: Defaulting to hostname 'linux'. Jul 10 00:37:50.868008 systemd[1]: Started systemd-resolved.service. Jul 10 00:37:50.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.873220 systemd[1]: Finished dracut-cmdline-ask.service. Jul 10 00:37:50.876529 kernel: audit: type=1130 audit(1752107870.868:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.875201 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:37:50.886152 kernel: audit: type=1130 audit(1752107870.874:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.886169 kernel: audit: type=1130 audit(1752107870.876:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.886179 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 10 00:37:50.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.877610 systemd[1]: Reached target nss-lookup.target. Jul 10 00:37:50.888070 systemd[1]: Starting dracut-cmdline.service... Jul 10 00:37:50.890994 systemd-modules-load[198]: Inserted module 'br_netfilter' Jul 10 00:37:50.892119 kernel: Bridge firewalling registered Jul 10 00:37:50.901715 dracut-cmdline[214]: dracut-dracut-053 Jul 10 00:37:50.903937 dracut-cmdline[214]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:37:50.909933 kernel: SCSI subsystem initialized Jul 10 00:37:50.921972 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 10 00:37:50.922012 kernel: device-mapper: uevent: version 1.0.3 Jul 10 00:37:50.922023 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 10 00:37:50.924574 systemd-modules-load[198]: Inserted module 'dm_multipath' Jul 10 00:37:50.925209 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:37:50.930110 kernel: audit: type=1130 audit(1752107870.924:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.924000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.926305 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:37:50.934887 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:37:50.939135 kernel: audit: type=1130 audit(1752107870.934:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:50.975929 kernel: Loading iSCSI transport class v2.0-870. Jul 10 00:37:50.991929 kernel: iscsi: registered transport (tcp) Jul 10 00:37:51.012365 kernel: iscsi: registered transport (qla4xxx) Jul 10 00:37:51.012381 kernel: QLogic iSCSI HBA Driver Jul 10 00:37:51.042959 systemd[1]: Finished dracut-cmdline.service. Jul 10 00:37:51.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.045239 systemd[1]: Starting dracut-pre-udev.service... Jul 10 00:37:51.048483 kernel: audit: type=1130 audit(1752107871.043:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.091925 kernel: raid6: avx2x4 gen() 24235 MB/s Jul 10 00:37:51.108923 kernel: raid6: avx2x4 xor() 7332 MB/s Jul 10 00:37:51.125925 kernel: raid6: avx2x2 gen() 32009 MB/s Jul 10 00:37:51.142925 kernel: raid6: avx2x2 xor() 19233 MB/s Jul 10 00:37:51.159924 kernel: raid6: avx2x1 gen() 26411 MB/s Jul 10 00:37:51.176923 kernel: raid6: avx2x1 xor() 15273 MB/s Jul 10 00:37:51.196924 kernel: raid6: sse2x4 gen() 14742 MB/s Jul 10 00:37:51.213923 kernel: raid6: sse2x4 xor() 6960 MB/s Jul 10 00:37:51.230924 kernel: raid6: sse2x2 gen() 16057 MB/s Jul 10 00:37:51.247928 kernel: raid6: sse2x2 xor() 9773 MB/s Jul 10 00:37:51.264925 kernel: raid6: sse2x1 gen() 12143 MB/s Jul 10 00:37:51.282263 kernel: raid6: sse2x1 xor() 7755 MB/s Jul 10 00:37:51.282282 kernel: raid6: using algorithm avx2x2 gen() 32009 MB/s Jul 10 00:37:51.282291 kernel: raid6: .... xor() 19233 MB/s, rmw enabled Jul 10 00:37:51.282963 kernel: raid6: using avx2x2 recovery algorithm Jul 10 00:37:51.303930 kernel: xor: automatically using best checksumming function avx Jul 10 00:37:51.472950 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 10 00:37:51.481344 systemd[1]: Finished dracut-pre-udev.service. Jul 10 00:37:51.485674 kernel: audit: type=1130 audit(1752107871.480:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.485693 kernel: audit: type=1334 audit(1752107871.484:10): prog-id=7 op=LOAD Jul 10 00:37:51.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.484000 audit: BPF prog-id=7 op=LOAD Jul 10 00:37:51.486000 audit: BPF prog-id=8 op=LOAD Jul 10 00:37:51.486973 systemd[1]: Starting systemd-udevd.service... Jul 10 00:37:51.499077 systemd-udevd[397]: Using default interface naming scheme 'v252'. Jul 10 00:37:51.503581 systemd[1]: Started systemd-udevd.service. Jul 10 00:37:51.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.504301 systemd[1]: Starting dracut-pre-trigger.service... Jul 10 00:37:51.513407 dracut-pre-trigger[398]: rd.md=0: removing MD RAID activation Jul 10 00:37:51.538306 systemd[1]: Finished dracut-pre-trigger.service. Jul 10 00:37:51.538000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.539881 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:37:51.570312 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:37:51.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:51.718318 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 10 00:37:51.738458 kernel: cryptd: max_cpu_qlen set to 1000 Jul 10 00:37:51.738481 kernel: libata version 3.00 loaded. Jul 10 00:37:51.738491 kernel: AVX2 version of gcm_enc/dec engaged. Jul 10 00:37:51.738505 kernel: AES CTR mode by8 optimization enabled Jul 10 00:37:51.738513 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 10 00:37:51.738522 kernel: GPT:9289727 != 19775487 Jul 10 00:37:51.738530 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 10 00:37:51.738539 kernel: GPT:9289727 != 19775487 Jul 10 00:37:51.738547 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 10 00:37:51.738555 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:37:51.738563 kernel: ahci 0000:00:1f.2: version 3.0 Jul 10 00:37:51.765074 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 10 00:37:51.765097 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 10 00:37:51.765196 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 10 00:37:51.765272 kernel: scsi host0: ahci Jul 10 00:37:51.765366 kernel: scsi host1: ahci Jul 10 00:37:51.765452 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (451) Jul 10 00:37:51.765462 kernel: scsi host2: ahci Jul 10 00:37:51.765546 kernel: scsi host3: ahci Jul 10 00:37:51.765666 kernel: scsi host4: ahci Jul 10 00:37:51.765770 kernel: scsi host5: ahci Jul 10 00:37:51.766081 kernel: ata1: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040100 irq 34 Jul 10 00:37:51.766091 kernel: ata2: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040180 irq 34 Jul 10 00:37:51.766100 kernel: ata3: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040200 irq 34 Jul 10 00:37:51.766108 kernel: ata4: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040280 irq 34 Jul 10 00:37:51.766116 kernel: ata5: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040300 irq 34 Jul 10 00:37:51.766128 kernel: ata6: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040380 irq 34 Jul 10 00:37:51.757053 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 10 00:37:51.763746 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 10 00:37:51.790713 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 10 00:37:51.796154 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 10 00:37:51.799192 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:37:51.801286 systemd[1]: Starting disk-uuid.service... Jul 10 00:37:51.904354 disk-uuid[529]: Primary Header is updated. Jul 10 00:37:51.904354 disk-uuid[529]: Secondary Entries is updated. Jul 10 00:37:51.904354 disk-uuid[529]: Secondary Header is updated. Jul 10 00:37:51.908003 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:37:51.911957 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:37:52.070947 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 10 00:37:52.071019 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 10 00:37:52.094947 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 10 00:37:52.095021 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 10 00:37:52.095938 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 10 00:37:52.097068 kernel: ata3.00: applying bridge limits Jul 10 00:37:52.097937 kernel: ata3.00: configured for UDMA/100 Jul 10 00:37:52.098053 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 10 00:37:52.104940 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 10 00:37:52.104961 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 10 00:37:52.135933 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 10 00:37:52.152532 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 10 00:37:52.152545 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 10 00:37:52.912923 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:37:52.913405 disk-uuid[530]: The operation has completed successfully. Jul 10 00:37:52.935074 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 10 00:37:52.935000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:52.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:52.935160 systemd[1]: Finished disk-uuid.service. Jul 10 00:37:52.939857 systemd[1]: Starting verity-setup.service... Jul 10 00:37:52.950938 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 10 00:37:52.969432 systemd[1]: Found device dev-mapper-usr.device. Jul 10 00:37:52.971588 systemd[1]: Mounting sysusr-usr.mount... Jul 10 00:37:52.973470 systemd[1]: Finished verity-setup.service. Jul 10 00:37:52.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.029745 systemd[1]: Mounted sysusr-usr.mount. Jul 10 00:37:53.031498 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 10 00:37:53.031614 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 10 00:37:53.034070 systemd[1]: Starting ignition-setup.service... Jul 10 00:37:53.036519 systemd[1]: Starting parse-ip-for-networkd.service... Jul 10 00:37:53.043444 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 00:37:53.043475 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:37:53.043485 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:37:53.051559 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 10 00:37:53.059275 systemd[1]: Finished ignition-setup.service. Jul 10 00:37:53.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.060017 systemd[1]: Starting ignition-fetch-offline.service... Jul 10 00:37:53.096839 ignition[638]: Ignition 2.14.0 Jul 10 00:37:53.096851 ignition[638]: Stage: fetch-offline Jul 10 00:37:53.096891 ignition[638]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:37:53.096899 ignition[638]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:37:53.101000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.100786 systemd[1]: Finished parse-ip-for-networkd.service. Jul 10 00:37:53.102000 audit: BPF prog-id=9 op=LOAD Jul 10 00:37:53.097009 ignition[638]: parsed url from cmdline: "" Jul 10 00:37:53.097012 ignition[638]: no config URL provided Jul 10 00:37:53.097017 ignition[638]: reading system config file "/usr/lib/ignition/user.ign" Jul 10 00:37:53.103633 systemd[1]: Starting systemd-networkd.service... Jul 10 00:37:53.097023 ignition[638]: no config at "/usr/lib/ignition/user.ign" Jul 10 00:37:53.097040 ignition[638]: op(1): [started] loading QEMU firmware config module Jul 10 00:37:53.097045 ignition[638]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 10 00:37:53.105008 ignition[638]: op(1): [finished] loading QEMU firmware config module Jul 10 00:37:53.145739 ignition[638]: parsing config with SHA512: d4da5376aa87cd9711794d885e9752a9c2d2cdbe4de3623ece19fcff12be12162008725a3208f396cdb38cee04b9fe1eb60a72edb376ba4ac3ee8829366432de Jul 10 00:37:53.153424 unknown[638]: fetched base config from "system" Jul 10 00:37:53.153435 unknown[638]: fetched user config from "qemu" Jul 10 00:37:53.155352 ignition[638]: fetch-offline: fetch-offline passed Jul 10 00:37:53.156181 ignition[638]: Ignition finished successfully Jul 10 00:37:53.157888 systemd[1]: Finished ignition-fetch-offline.service. Jul 10 00:37:53.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.162992 systemd-networkd[719]: lo: Link UP Jul 10 00:37:53.163001 systemd-networkd[719]: lo: Gained carrier Jul 10 00:37:53.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.163374 systemd-networkd[719]: Enumeration completed Jul 10 00:37:53.163480 systemd[1]: Started systemd-networkd.service. Jul 10 00:37:53.163561 systemd-networkd[719]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:37:53.164483 systemd-networkd[719]: eth0: Link UP Jul 10 00:37:53.164487 systemd-networkd[719]: eth0: Gained carrier Jul 10 00:37:53.165161 systemd[1]: Reached target network.target. Jul 10 00:37:53.166616 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 10 00:37:53.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.176171 ignition[721]: Ignition 2.14.0 Jul 10 00:37:53.167388 systemd[1]: Starting ignition-kargs.service... Jul 10 00:37:53.176176 ignition[721]: Stage: kargs Jul 10 00:37:53.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.181449 iscsid[730]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:37:53.181449 iscsid[730]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Jul 10 00:37:53.181449 iscsid[730]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 10 00:37:53.181449 iscsid[730]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 10 00:37:53.181449 iscsid[730]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 10 00:37:53.181449 iscsid[730]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:37:53.181449 iscsid[730]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 10 00:37:53.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.168790 systemd[1]: Starting iscsiuio.service... Jul 10 00:37:53.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.176257 ignition[721]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:37:53.173014 systemd[1]: Started iscsiuio.service. Jul 10 00:37:53.176265 ignition[721]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:37:53.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.175828 systemd[1]: Starting iscsid.service... Jul 10 00:37:53.177140 ignition[721]: kargs: kargs passed Jul 10 00:37:53.178804 systemd[1]: Finished ignition-kargs.service. Jul 10 00:37:53.177170 ignition[721]: Ignition finished successfully Jul 10 00:37:53.180237 systemd[1]: Started iscsid.service. Jul 10 00:37:53.193696 ignition[734]: Ignition 2.14.0 Jul 10 00:37:53.182005 systemd-networkd[719]: eth0: DHCPv4 address 10.0.0.42/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:37:53.193701 ignition[734]: Stage: disks Jul 10 00:37:53.182223 systemd[1]: Starting dracut-initqueue.service... Jul 10 00:37:53.193786 ignition[734]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:37:53.187300 systemd[1]: Starting ignition-disks.service... Jul 10 00:37:53.193793 ignition[734]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:37:53.192507 systemd[1]: Finished dracut-initqueue.service. Jul 10 00:37:53.194681 ignition[734]: disks: disks passed Jul 10 00:37:53.220063 systemd-fsck[752]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 10 00:37:53.193951 systemd[1]: Reached target remote-fs-pre.target. Jul 10 00:37:53.194718 ignition[734]: Ignition finished successfully Jul 10 00:37:53.195924 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:37:53.196807 systemd[1]: Reached target remote-fs.target. Jul 10 00:37:53.197391 systemd[1]: Starting dracut-pre-mount.service... Jul 10 00:37:53.197848 systemd[1]: Finished ignition-disks.service. Jul 10 00:37:53.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.198242 systemd[1]: Reached target initrd-root-device.target. Jul 10 00:37:53.198349 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:37:53.198506 systemd[1]: Reached target local-fs.target. Jul 10 00:37:53.198674 systemd[1]: Reached target sysinit.target. Jul 10 00:37:53.233996 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 10 00:37:53.198838 systemd[1]: Reached target basic.target. Jul 10 00:37:53.204299 systemd[1]: Finished dracut-pre-mount.service. Jul 10 00:37:53.206012 systemd[1]: Starting systemd-fsck-root.service... Jul 10 00:37:53.225090 systemd[1]: Finished systemd-fsck-root.service. Jul 10 00:37:53.227142 systemd[1]: Mounting sysroot.mount... Jul 10 00:37:53.233154 systemd[1]: Mounted sysroot.mount. Jul 10 00:37:53.234068 systemd[1]: Reached target initrd-root-fs.target. Jul 10 00:37:53.236479 systemd[1]: Mounting sysroot-usr.mount... Jul 10 00:37:53.238103 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 10 00:37:53.238132 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 10 00:37:53.246889 initrd-setup-root[762]: cut: /sysroot/etc/passwd: No such file or directory Jul 10 00:37:53.238149 systemd[1]: Reached target ignition-diskful.target. Jul 10 00:37:53.240061 systemd[1]: Mounted sysroot-usr.mount. Jul 10 00:37:53.249706 initrd-setup-root[770]: cut: /sysroot/etc/group: No such file or directory Jul 10 00:37:53.241310 systemd[1]: Starting initrd-setup-root.service... Jul 10 00:37:53.251876 initrd-setup-root[778]: cut: /sysroot/etc/shadow: No such file or directory Jul 10 00:37:53.254592 initrd-setup-root[786]: cut: /sysroot/etc/gshadow: No such file or directory Jul 10 00:37:53.280578 systemd[1]: Finished initrd-setup-root.service. Jul 10 00:37:53.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.282136 systemd[1]: Starting ignition-mount.service... Jul 10 00:37:53.283330 systemd[1]: Starting sysroot-boot.service... Jul 10 00:37:53.289507 bash[804]: umount: /sysroot/usr/share/oem: not mounted. Jul 10 00:37:53.297095 ignition[805]: INFO : Ignition 2.14.0 Jul 10 00:37:53.298174 ignition[805]: INFO : Stage: mount Jul 10 00:37:53.299674 ignition[805]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:37:53.299674 ignition[805]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:37:53.298000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:53.298876 systemd[1]: Finished sysroot-boot.service. Jul 10 00:37:53.303556 ignition[805]: INFO : mount: mount passed Jul 10 00:37:53.303556 ignition[805]: INFO : Ignition finished successfully Jul 10 00:37:53.300756 systemd[1]: Finished ignition-mount.service. Jul 10 00:37:53.980753 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 00:37:53.989454 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (813) Jul 10 00:37:53.989479 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 00:37:53.989489 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:37:53.990262 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:37:53.994347 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 00:37:53.997004 systemd[1]: Starting ignition-files.service... Jul 10 00:37:54.011820 ignition[833]: INFO : Ignition 2.14.0 Jul 10 00:37:54.011820 ignition[833]: INFO : Stage: files Jul 10 00:37:54.013410 ignition[833]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:37:54.013410 ignition[833]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:37:54.013410 ignition[833]: DEBUG : files: compiled without relabeling support, skipping Jul 10 00:37:54.017211 ignition[833]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 10 00:37:54.017211 ignition[833]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 10 00:37:54.020288 ignition[833]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 10 00:37:54.020288 ignition[833]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 10 00:37:54.020288 ignition[833]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 10 00:37:54.019999 unknown[833]: wrote ssh authorized keys file for user: core Jul 10 00:37:54.025847 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 10 00:37:54.025847 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 10 00:37:54.092658 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 10 00:37:54.274160 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 10 00:37:54.274160 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 00:37:54.277979 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Jul 10 00:37:54.792039 systemd-networkd[719]: eth0: Gained IPv6LL Jul 10 00:37:55.019138 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 10 00:37:55.364777 ignition[833]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 00:37:55.364777 ignition[833]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 10 00:37:55.368330 ignition[833]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:37:55.368330 ignition[833]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:37:55.368330 ignition[833]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 10 00:37:55.368330 ignition[833]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 10 00:37:55.368330 ignition[833]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:37:55.376011 ignition[833]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:37:55.376011 ignition[833]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 10 00:37:55.376011 ignition[833]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 10 00:37:55.376011 ignition[833]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 10 00:37:55.376011 ignition[833]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 10 00:37:55.376011 ignition[833]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:37:55.402111 ignition[833]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:37:55.403798 ignition[833]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 10 00:37:55.403798 ignition[833]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:37:55.406760 ignition[833]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:37:55.406760 ignition[833]: INFO : files: files passed Jul 10 00:37:55.406760 ignition[833]: INFO : Ignition finished successfully Jul 10 00:37:55.410721 systemd[1]: Finished ignition-files.service. Jul 10 00:37:55.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.412559 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 10 00:37:55.417786 kernel: kauditd_printk_skb: 22 callbacks suppressed Jul 10 00:37:55.417812 kernel: audit: type=1130 audit(1752107875.410:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.416842 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 10 00:37:55.417597 systemd[1]: Starting ignition-quench.service... Jul 10 00:37:55.427218 kernel: audit: type=1130 audit(1752107875.420:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.427237 kernel: audit: type=1131 audit(1752107875.420:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.419801 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 10 00:37:55.428350 initrd-setup-root-after-ignition[856]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 10 00:37:55.419867 systemd[1]: Finished ignition-quench.service. Jul 10 00:37:55.435528 kernel: audit: type=1130 audit(1752107875.429:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.435597 initrd-setup-root-after-ignition[860]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 10 00:37:55.428774 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 10 00:37:55.430934 systemd[1]: Reached target ignition-complete.target. Jul 10 00:37:55.434558 systemd[1]: Starting initrd-parse-etc.service... Jul 10 00:37:55.445676 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 10 00:37:55.445773 systemd[1]: Finished initrd-parse-etc.service. Jul 10 00:37:55.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.446840 systemd[1]: Reached target initrd-fs.target. Jul 10 00:37:55.455666 kernel: audit: type=1130 audit(1752107875.445:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.455685 kernel: audit: type=1131 audit(1752107875.445:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.445000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.454286 systemd[1]: Reached target initrd.target. Jul 10 00:37:55.454360 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 10 00:37:55.455716 systemd[1]: Starting dracut-pre-pivot.service... Jul 10 00:37:55.468317 systemd[1]: Finished dracut-pre-pivot.service. Jul 10 00:37:55.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.469796 systemd[1]: Starting initrd-cleanup.service... Jul 10 00:37:55.473857 kernel: audit: type=1130 audit(1752107875.468:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.477353 systemd[1]: Stopped target nss-lookup.target. Jul 10 00:37:55.477489 systemd[1]: Stopped target remote-cryptsetup.target. Jul 10 00:37:55.479799 systemd[1]: Stopped target timers.target. Jul 10 00:37:55.481291 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 10 00:37:55.481000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.481389 systemd[1]: Stopped dracut-pre-pivot.service. Jul 10 00:37:55.482854 systemd[1]: Stopped target initrd.target. Jul 10 00:37:55.488391 kernel: audit: type=1131 audit(1752107875.481:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.487800 systemd[1]: Stopped target basic.target. Jul 10 00:37:55.489142 systemd[1]: Stopped target ignition-complete.target. Jul 10 00:37:55.490599 systemd[1]: Stopped target ignition-diskful.target. Jul 10 00:37:55.492161 systemd[1]: Stopped target initrd-root-device.target. Jul 10 00:37:55.493747 systemd[1]: Stopped target remote-fs.target. Jul 10 00:37:55.495248 systemd[1]: Stopped target remote-fs-pre.target. Jul 10 00:37:55.496733 systemd[1]: Stopped target sysinit.target. Jul 10 00:37:55.498190 systemd[1]: Stopped target local-fs.target. Jul 10 00:37:55.498929 systemd[1]: Stopped target local-fs-pre.target. Jul 10 00:37:55.501048 systemd[1]: Stopped target swap.target. Jul 10 00:37:55.502455 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 10 00:37:55.503000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.502571 systemd[1]: Stopped dracut-pre-mount.service. Jul 10 00:37:55.509364 kernel: audit: type=1131 audit(1752107875.503:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.504011 systemd[1]: Stopped target cryptsetup.target. Jul 10 00:37:55.509000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.508625 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 10 00:37:55.515255 kernel: audit: type=1131 audit(1752107875.509:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.513000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.508715 systemd[1]: Stopped dracut-initqueue.service. Jul 10 00:37:55.510244 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 10 00:37:55.510335 systemd[1]: Stopped ignition-fetch-offline.service. Jul 10 00:37:55.513793 systemd[1]: Stopped target paths.target. Jul 10 00:37:55.516001 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 10 00:37:55.520311 systemd[1]: Stopped systemd-ask-password-console.path. Jul 10 00:37:55.522311 systemd[1]: Stopped target slices.target. Jul 10 00:37:55.523801 systemd[1]: Stopped target sockets.target. Jul 10 00:37:55.525307 systemd[1]: iscsid.socket: Deactivated successfully. Jul 10 00:37:55.526132 systemd[1]: Closed iscsid.socket. Jul 10 00:37:55.527476 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 10 00:37:55.528464 systemd[1]: Closed iscsiuio.socket. Jul 10 00:37:55.530136 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 10 00:37:55.531453 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 10 00:37:55.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.533443 systemd[1]: ignition-files.service: Deactivated successfully. Jul 10 00:37:55.534379 systemd[1]: Stopped ignition-files.service. Jul 10 00:37:55.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.536746 systemd[1]: Stopping ignition-mount.service... Jul 10 00:37:55.538231 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 10 00:37:55.539226 systemd[1]: Stopped kmod-static-nodes.service. Jul 10 00:37:55.540000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.541618 systemd[1]: Stopping sysroot-boot.service... Jul 10 00:37:55.543049 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 10 00:37:55.544187 ignition[873]: INFO : Ignition 2.14.0 Jul 10 00:37:55.544187 ignition[873]: INFO : Stage: umount Jul 10 00:37:55.544187 ignition[873]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:37:55.544187 ignition[873]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:37:55.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.544241 systemd[1]: Stopped systemd-udev-trigger.service. Jul 10 00:37:55.550749 ignition[873]: INFO : umount: umount passed Jul 10 00:37:55.550749 ignition[873]: INFO : Ignition finished successfully Jul 10 00:37:55.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.548935 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 10 00:37:55.549042 systemd[1]: Stopped dracut-pre-trigger.service. Jul 10 00:37:55.557121 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 10 00:37:55.558862 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 10 00:37:55.559865 systemd[1]: Stopped ignition-mount.service. Jul 10 00:37:55.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.561874 systemd[1]: Stopped target network.target. Jul 10 00:37:55.563636 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 10 00:37:55.565033 systemd[1]: Stopped ignition-disks.service. Jul 10 00:37:55.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.566715 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 10 00:37:55.567607 systemd[1]: Stopped ignition-kargs.service. Jul 10 00:37:55.569000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.569143 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 10 00:37:55.569176 systemd[1]: Stopped ignition-setup.service. Jul 10 00:37:55.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.572579 systemd[1]: Stopping systemd-networkd.service... Jul 10 00:37:55.574504 systemd[1]: Stopping systemd-resolved.service... Jul 10 00:37:55.576337 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 10 00:37:55.576949 systemd-networkd[719]: eth0: DHCPv6 lease lost Jul 10 00:37:55.577419 systemd[1]: Finished initrd-cleanup.service. Jul 10 00:37:55.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.580059 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 10 00:37:55.581171 systemd[1]: Stopped systemd-networkd.service. Jul 10 00:37:55.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.583526 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 10 00:37:55.584598 systemd[1]: Stopped systemd-resolved.service. Jul 10 00:37:55.586000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.586000 audit: BPF prog-id=9 op=UNLOAD Jul 10 00:37:55.587740 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 10 00:37:55.587773 systemd[1]: Closed systemd-networkd.socket. Jul 10 00:37:55.590823 systemd[1]: Stopping network-cleanup.service... Jul 10 00:37:55.591000 audit: BPF prog-id=6 op=UNLOAD Jul 10 00:37:55.592558 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 10 00:37:55.593700 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 10 00:37:55.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.595709 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 10 00:37:55.595743 systemd[1]: Stopped systemd-sysctl.service. Jul 10 00:37:55.597000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.598446 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 10 00:37:55.598492 systemd[1]: Stopped systemd-modules-load.service. Jul 10 00:37:55.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.601378 systemd[1]: Stopping systemd-udevd.service... Jul 10 00:37:55.604145 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 10 00:37:55.606859 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 10 00:37:55.607994 systemd[1]: Stopped network-cleanup.service. Jul 10 00:37:55.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.609984 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 10 00:37:55.611079 systemd[1]: Stopped systemd-udevd.service. Jul 10 00:37:55.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.613118 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 10 00:37:55.613158 systemd[1]: Closed systemd-udevd-control.socket. Jul 10 00:37:55.616047 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 10 00:37:55.616082 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 10 00:37:55.618758 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 10 00:37:55.619000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.618797 systemd[1]: Stopped dracut-pre-udev.service. Jul 10 00:37:55.620608 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 10 00:37:55.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.620641 systemd[1]: Stopped dracut-cmdline.service. Jul 10 00:37:55.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.622201 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 10 00:37:55.623070 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 10 00:37:55.626759 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 10 00:37:55.628462 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 10 00:37:55.628500 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 10 00:37:55.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.631351 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 10 00:37:55.632264 systemd[1]: Stopped sysroot-boot.service. Jul 10 00:37:55.632000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.633833 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 10 00:37:55.634870 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 10 00:37:55.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.636697 systemd[1]: Reached target initrd-switch-root.target. Jul 10 00:37:55.638373 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 10 00:37:55.638408 systemd[1]: Stopped initrd-setup-root.service. Jul 10 00:37:55.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:55.641309 systemd[1]: Starting initrd-switch-root.service... Jul 10 00:37:55.656491 systemd[1]: Switching root. Jul 10 00:37:55.675848 iscsid[730]: iscsid shutting down. Jul 10 00:37:55.676624 systemd-journald[197]: Received SIGTERM from PID 1 (systemd). Jul 10 00:37:55.676687 systemd-journald[197]: Journal stopped Jul 10 00:37:58.657346 kernel: SELinux: Class mctp_socket not defined in policy. Jul 10 00:37:58.657397 kernel: SELinux: Class anon_inode not defined in policy. Jul 10 00:37:58.657407 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 10 00:37:58.657417 kernel: SELinux: policy capability network_peer_controls=1 Jul 10 00:37:58.657426 kernel: SELinux: policy capability open_perms=1 Jul 10 00:37:58.657435 kernel: SELinux: policy capability extended_socket_class=1 Jul 10 00:37:58.657446 kernel: SELinux: policy capability always_check_network=0 Jul 10 00:37:58.657466 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 10 00:37:58.657476 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 10 00:37:58.657484 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 10 00:37:58.657494 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 10 00:37:58.657504 systemd[1]: Successfully loaded SELinux policy in 36.808ms. Jul 10 00:37:58.657517 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.422ms. Jul 10 00:37:58.657527 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:37:58.657538 systemd[1]: Detected virtualization kvm. Jul 10 00:37:58.657549 systemd[1]: Detected architecture x86-64. Jul 10 00:37:58.657559 systemd[1]: Detected first boot. Jul 10 00:37:58.657569 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:37:58.657579 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 10 00:37:58.657588 systemd[1]: Populated /etc with preset unit settings. Jul 10 00:37:58.657599 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:37:58.657611 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:37:58.657623 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:37:58.657634 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 10 00:37:58.657644 systemd[1]: Stopped iscsiuio.service. Jul 10 00:37:58.657654 systemd[1]: iscsid.service: Deactivated successfully. Jul 10 00:37:58.657664 systemd[1]: Stopped iscsid.service. Jul 10 00:37:58.657673 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 10 00:37:58.657683 systemd[1]: Stopped initrd-switch-root.service. Jul 10 00:37:58.657694 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 10 00:37:58.657704 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 10 00:37:58.657714 systemd[1]: Created slice system-addon\x2drun.slice. Jul 10 00:37:58.657724 systemd[1]: Created slice system-getty.slice. Jul 10 00:37:58.657736 systemd[1]: Created slice system-modprobe.slice. Jul 10 00:37:58.657747 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 10 00:37:58.657757 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 10 00:37:58.657767 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 10 00:37:58.657778 systemd[1]: Created slice user.slice. Jul 10 00:37:58.657787 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:37:58.657797 systemd[1]: Started systemd-ask-password-wall.path. Jul 10 00:37:58.657807 systemd[1]: Set up automount boot.automount. Jul 10 00:37:58.657817 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 10 00:37:58.657828 systemd[1]: Stopped target initrd-switch-root.target. Jul 10 00:37:58.657837 systemd[1]: Stopped target initrd-fs.target. Jul 10 00:37:58.657847 systemd[1]: Stopped target initrd-root-fs.target. Jul 10 00:37:58.657858 systemd[1]: Reached target integritysetup.target. Jul 10 00:37:58.657870 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:37:58.657879 systemd[1]: Reached target remote-fs.target. Jul 10 00:37:58.657889 systemd[1]: Reached target slices.target. Jul 10 00:37:58.657899 systemd[1]: Reached target swap.target. Jul 10 00:37:58.657920 systemd[1]: Reached target torcx.target. Jul 10 00:37:58.657930 systemd[1]: Reached target veritysetup.target. Jul 10 00:37:58.657940 systemd[1]: Listening on systemd-coredump.socket. Jul 10 00:37:58.657950 systemd[1]: Listening on systemd-initctl.socket. Jul 10 00:37:58.657961 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:37:58.657972 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:37:58.657982 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:37:58.657992 systemd[1]: Listening on systemd-userdbd.socket. Jul 10 00:37:58.658002 systemd[1]: Mounting dev-hugepages.mount... Jul 10 00:37:58.658012 systemd[1]: Mounting dev-mqueue.mount... Jul 10 00:37:58.658022 systemd[1]: Mounting media.mount... Jul 10 00:37:58.658032 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:37:58.658042 systemd[1]: Mounting sys-kernel-debug.mount... Jul 10 00:37:58.658053 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 10 00:37:58.658065 systemd[1]: Mounting tmp.mount... Jul 10 00:37:58.658075 systemd[1]: Starting flatcar-tmpfiles.service... Jul 10 00:37:58.658085 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:37:58.658095 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:37:58.658105 systemd[1]: Starting modprobe@configfs.service... Jul 10 00:37:58.658115 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:37:58.658125 systemd[1]: Starting modprobe@drm.service... Jul 10 00:37:58.658134 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:37:58.658145 systemd[1]: Starting modprobe@fuse.service... Jul 10 00:37:58.658155 systemd[1]: Starting modprobe@loop.service... Jul 10 00:37:58.658165 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 10 00:37:58.658175 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 10 00:37:58.658185 systemd[1]: Stopped systemd-fsck-root.service. Jul 10 00:37:58.658195 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 10 00:37:58.658206 kernel: loop: module loaded Jul 10 00:37:58.658216 systemd[1]: Stopped systemd-fsck-usr.service. Jul 10 00:37:58.658225 kernel: fuse: init (API version 7.34) Jul 10 00:37:58.658236 systemd[1]: Stopped systemd-journald.service. Jul 10 00:37:58.658246 systemd[1]: Starting systemd-journald.service... Jul 10 00:37:58.658256 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:37:58.658266 systemd[1]: Starting systemd-network-generator.service... Jul 10 00:37:58.658276 systemd[1]: Starting systemd-remount-fs.service... Jul 10 00:37:58.658286 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:37:58.658296 systemd[1]: verity-setup.service: Deactivated successfully. Jul 10 00:37:58.658306 systemd[1]: Stopped verity-setup.service. Jul 10 00:37:58.658316 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:37:58.658329 systemd-journald[992]: Journal started Jul 10 00:37:58.658364 systemd-journald[992]: Runtime Journal (/run/log/journal/4465c2bd64c94d789b17c1623d065a96) is 6.0M, max 48.4M, 42.4M free. Jul 10 00:37:55.730000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 10 00:37:56.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:37:56.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:37:56.263000 audit: BPF prog-id=10 op=LOAD Jul 10 00:37:56.263000 audit: BPF prog-id=10 op=UNLOAD Jul 10 00:37:56.263000 audit: BPF prog-id=11 op=LOAD Jul 10 00:37:56.263000 audit: BPF prog-id=11 op=UNLOAD Jul 10 00:37:56.297000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 00:37:56.297000 audit[907]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001cd89c a1=c000150de0 a2=c0001590c0 a3=32 items=0 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:56.297000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:37:56.298000 audit[907]: AVC avc: denied { associate } for pid=907 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 00:37:56.298000 audit[907]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001cd975 a2=1ed a3=0 items=2 ppid=890 pid=907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:56.298000 audit: CWD cwd="/" Jul 10 00:37:56.298000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:56.298000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:56.298000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:37:58.449000 audit: BPF prog-id=12 op=LOAD Jul 10 00:37:58.449000 audit: BPF prog-id=3 op=UNLOAD Jul 10 00:37:58.449000 audit: BPF prog-id=13 op=LOAD Jul 10 00:37:58.449000 audit: BPF prog-id=14 op=LOAD Jul 10 00:37:58.449000 audit: BPF prog-id=4 op=UNLOAD Jul 10 00:37:58.449000 audit: BPF prog-id=5 op=UNLOAD Jul 10 00:37:58.450000 audit: BPF prog-id=15 op=LOAD Jul 10 00:37:58.450000 audit: BPF prog-id=12 op=UNLOAD Jul 10 00:37:58.450000 audit: BPF prog-id=16 op=LOAD Jul 10 00:37:58.451000 audit: BPF prog-id=17 op=LOAD Jul 10 00:37:58.451000 audit: BPF prog-id=13 op=UNLOAD Jul 10 00:37:58.451000 audit: BPF prog-id=14 op=UNLOAD Jul 10 00:37:58.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.460000 audit: BPF prog-id=15 op=UNLOAD Jul 10 00:37:58.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.638000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.638000 audit: BPF prog-id=18 op=LOAD Jul 10 00:37:58.638000 audit: BPF prog-id=19 op=LOAD Jul 10 00:37:58.638000 audit: BPF prog-id=20 op=LOAD Jul 10 00:37:58.638000 audit: BPF prog-id=16 op=UNLOAD Jul 10 00:37:58.638000 audit: BPF prog-id=17 op=UNLOAD Jul 10 00:37:58.656000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 10 00:37:58.656000 audit[992]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffd960ac790 a2=4000 a3=7ffd960ac82c items=0 ppid=1 pid=992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:58.656000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 10 00:37:58.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.449147 systemd[1]: Queued start job for default target multi-user.target. Jul 10 00:37:56.296224 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:37:58.449157 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 10 00:37:56.296495 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:37:58.453004 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 10 00:37:56.296511 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:37:56.296552 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 10 00:37:56.296561 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 10 00:37:56.296591 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 10 00:37:56.296602 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 10 00:37:56.296798 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 10 00:37:56.296835 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:37:56.296846 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:37:56.297504 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 10 00:37:56.297547 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 10 00:37:56.297563 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 10 00:37:56.297576 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 10 00:37:56.297591 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 10 00:37:56.297603 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:56Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 10 00:37:58.174994 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:58Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:37:58.175280 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:58Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:37:58.175387 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:58Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:37:58.175551 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:58Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:37:58.175598 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:58Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 10 00:37:58.175650 /usr/lib/systemd/system-generators/torcx-generator[907]: time="2025-07-10T00:37:58Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 10 00:37:58.663088 systemd[1]: Started systemd-journald.service. Jul 10 00:37:58.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.663667 systemd[1]: Mounted dev-hugepages.mount. Jul 10 00:37:58.664550 systemd[1]: Mounted dev-mqueue.mount. Jul 10 00:37:58.665440 systemd[1]: Mounted media.mount. Jul 10 00:37:58.666339 systemd[1]: Mounted sys-kernel-debug.mount. Jul 10 00:37:58.667337 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 10 00:37:58.668398 systemd[1]: Mounted tmp.mount. Jul 10 00:37:58.669573 systemd[1]: Finished flatcar-tmpfiles.service. Jul 10 00:37:58.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.670875 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:37:58.670000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.672114 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 10 00:37:58.672324 systemd[1]: Finished modprobe@configfs.service. Jul 10 00:37:58.673000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.673603 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:37:58.673859 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:37:58.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.674000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.675072 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:37:58.675239 systemd[1]: Finished modprobe@drm.service. Jul 10 00:37:58.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.676473 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:37:58.676635 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:37:58.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.677880 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 10 00:37:58.678046 systemd[1]: Finished modprobe@fuse.service. Jul 10 00:37:58.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.679120 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:37:58.679283 systemd[1]: Finished modprobe@loop.service. Jul 10 00:37:58.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.680630 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:37:58.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.681887 systemd[1]: Finished systemd-network-generator.service. Jul 10 00:37:58.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.683208 systemd[1]: Finished systemd-remount-fs.service. Jul 10 00:37:58.684000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.684611 systemd[1]: Reached target network-pre.target. Jul 10 00:37:58.686443 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 10 00:37:58.688119 systemd[1]: Mounting sys-kernel-config.mount... Jul 10 00:37:58.689291 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 10 00:37:58.690416 systemd[1]: Starting systemd-hwdb-update.service... Jul 10 00:37:58.692356 systemd[1]: Starting systemd-journal-flush.service... Jul 10 00:37:58.693444 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:37:58.694456 systemd[1]: Starting systemd-random-seed.service... Jul 10 00:37:58.696444 systemd-journald[992]: Time spent on flushing to /var/log/journal/4465c2bd64c94d789b17c1623d065a96 is 17.614ms for 1154 entries. Jul 10 00:37:58.696444 systemd-journald[992]: System Journal (/var/log/journal/4465c2bd64c94d789b17c1623d065a96) is 8.0M, max 195.6M, 187.6M free. Jul 10 00:37:58.735258 systemd-journald[992]: Received client request to flush runtime journal. Jul 10 00:37:58.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:58.695622 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:37:58.697055 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:37:58.699390 systemd[1]: Starting systemd-sysusers.service... Jul 10 00:37:58.701589 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 10 00:37:58.736137 udevadm[1010]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 10 00:37:58.703381 systemd[1]: Mounted sys-kernel-config.mount. Jul 10 00:37:58.704588 systemd[1]: Finished systemd-random-seed.service. Jul 10 00:37:58.705735 systemd[1]: Reached target first-boot-complete.target. Jul 10 00:37:58.706815 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:37:58.708639 systemd[1]: Starting systemd-udev-settle.service... Jul 10 00:37:58.717690 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:37:58.729748 systemd[1]: Finished systemd-sysusers.service. Jul 10 00:37:58.735960 systemd[1]: Finished systemd-journal-flush.service. Jul 10 00:37:58.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.127867 systemd[1]: Finished systemd-hwdb-update.service. Jul 10 00:37:59.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.128000 audit: BPF prog-id=21 op=LOAD Jul 10 00:37:59.128000 audit: BPF prog-id=22 op=LOAD Jul 10 00:37:59.128000 audit: BPF prog-id=7 op=UNLOAD Jul 10 00:37:59.128000 audit: BPF prog-id=8 op=UNLOAD Jul 10 00:37:59.130078 systemd[1]: Starting systemd-udevd.service... Jul 10 00:37:59.145135 systemd-udevd[1013]: Using default interface naming scheme 'v252'. Jul 10 00:37:59.157215 systemd[1]: Started systemd-udevd.service. Jul 10 00:37:59.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.158000 audit: BPF prog-id=23 op=LOAD Jul 10 00:37:59.161384 systemd[1]: Starting systemd-networkd.service... Jul 10 00:37:59.165000 audit: BPF prog-id=24 op=LOAD Jul 10 00:37:59.165000 audit: BPF prog-id=25 op=LOAD Jul 10 00:37:59.165000 audit: BPF prog-id=26 op=LOAD Jul 10 00:37:59.167015 systemd[1]: Starting systemd-userdbd.service... Jul 10 00:37:59.191656 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 10 00:37:59.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.203298 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:37:59.204651 systemd[1]: Started systemd-userdbd.service. Jul 10 00:37:59.227956 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 10 00:37:59.242936 kernel: ACPI: button: Power Button [PWRF] Jul 10 00:37:59.248751 systemd-networkd[1025]: lo: Link UP Jul 10 00:37:59.248762 systemd-networkd[1025]: lo: Gained carrier Jul 10 00:37:59.249185 systemd-networkd[1025]: Enumeration completed Jul 10 00:37:59.249277 systemd-networkd[1025]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:37:59.249279 systemd[1]: Started systemd-networkd.service. Jul 10 00:37:59.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.251466 systemd-networkd[1025]: eth0: Link UP Jul 10 00:37:59.251473 systemd-networkd[1025]: eth0: Gained carrier Jul 10 00:37:59.253000 audit[1038]: AVC avc: denied { confidentiality } for pid=1038 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 10 00:37:59.253000 audit[1038]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55cef6345b60 a1=338ac a2=7f570233dbc5 a3=5 items=110 ppid=1013 pid=1038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:59.253000 audit: CWD cwd="/" Jul 10 00:37:59.253000 audit: PATH item=0 name=(null) inode=50 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=1 name=(null) inode=12858 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=2 name=(null) inode=12858 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=3 name=(null) inode=12859 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=4 name=(null) inode=12858 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=5 name=(null) inode=12860 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=6 name=(null) inode=12858 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=7 name=(null) inode=12861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=8 name=(null) inode=12861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=9 name=(null) inode=12862 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=10 name=(null) inode=12861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=11 name=(null) inode=12863 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=12 name=(null) inode=12861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=13 name=(null) inode=12864 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=14 name=(null) inode=12861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=15 name=(null) inode=12865 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=16 name=(null) inode=12861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=17 name=(null) inode=12866 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=18 name=(null) inode=12858 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=19 name=(null) inode=12867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=20 name=(null) inode=12867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=21 name=(null) inode=12868 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=22 name=(null) inode=12867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=23 name=(null) inode=12869 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=24 name=(null) inode=12867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=25 name=(null) inode=12870 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=26 name=(null) inode=12867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=27 name=(null) inode=12871 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=28 name=(null) inode=12867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=29 name=(null) inode=12872 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=30 name=(null) inode=12858 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=31 name=(null) inode=12873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=32 name=(null) inode=12873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=33 name=(null) inode=12874 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=34 name=(null) inode=12873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=35 name=(null) inode=12875 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=36 name=(null) inode=12873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=37 name=(null) inode=12876 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=38 name=(null) inode=12873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=39 name=(null) inode=12877 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=40 name=(null) inode=12873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=41 name=(null) inode=12878 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=42 name=(null) inode=12858 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=43 name=(null) inode=12879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=44 name=(null) inode=12879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=45 name=(null) inode=12880 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=46 name=(null) inode=12879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=47 name=(null) inode=12881 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=48 name=(null) inode=12879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=49 name=(null) inode=12882 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=50 name=(null) inode=12879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=51 name=(null) inode=12883 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=52 name=(null) inode=12879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=53 name=(null) inode=12884 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=54 name=(null) inode=50 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=55 name=(null) inode=12885 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=56 name=(null) inode=12885 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=57 name=(null) inode=12886 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=58 name=(null) inode=12885 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=59 name=(null) inode=12887 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=60 name=(null) inode=12885 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=61 name=(null) inode=12888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=62 name=(null) inode=12888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=63 name=(null) inode=12889 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=64 name=(null) inode=12888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=65 name=(null) inode=12890 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=66 name=(null) inode=12888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=67 name=(null) inode=12891 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=68 name=(null) inode=12888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=69 name=(null) inode=12892 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=70 name=(null) inode=12888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=71 name=(null) inode=12893 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=72 name=(null) inode=12885 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=73 name=(null) inode=12894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=74 name=(null) inode=12894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=75 name=(null) inode=12895 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=76 name=(null) inode=12894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=77 name=(null) inode=12896 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=78 name=(null) inode=12894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=79 name=(null) inode=12897 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=80 name=(null) inode=12894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=81 name=(null) inode=12898 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=82 name=(null) inode=12894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=83 name=(null) inode=12899 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=84 name=(null) inode=12885 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=85 name=(null) inode=12900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=86 name=(null) inode=12900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=87 name=(null) inode=12901 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=88 name=(null) inode=12900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=89 name=(null) inode=12902 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=90 name=(null) inode=12900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=91 name=(null) inode=12903 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=92 name=(null) inode=12900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=93 name=(null) inode=12904 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=94 name=(null) inode=12900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=95 name=(null) inode=12905 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=96 name=(null) inode=12885 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=97 name=(null) inode=12906 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=98 name=(null) inode=12906 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=99 name=(null) inode=12907 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=100 name=(null) inode=12906 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=101 name=(null) inode=12908 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=102 name=(null) inode=12906 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=103 name=(null) inode=12909 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=104 name=(null) inode=12906 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=105 name=(null) inode=12910 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=106 name=(null) inode=12906 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=107 name=(null) inode=12911 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PATH item=109 name=(null) inode=12912 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:37:59.253000 audit: PROCTITLE proctitle="(udev-worker)" Jul 10 00:37:59.266522 systemd-networkd[1025]: eth0: DHCPv4 address 10.0.0.42/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:37:59.266933 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 10 00:37:59.276157 kernel: i801_smbus 0000:00:1f.3: Enabling SMBus device Jul 10 00:37:59.278380 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 10 00:37:59.278510 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 10 00:37:59.278656 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 10 00:37:59.293938 kernel: mousedev: PS/2 mouse device common for all mice Jul 10 00:37:59.332200 kernel: kvm: Nested Virtualization enabled Jul 10 00:37:59.332279 kernel: SVM: kvm: Nested Paging enabled Jul 10 00:37:59.332293 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 10 00:37:59.333341 kernel: SVM: Virtual GIF supported Jul 10 00:37:59.349929 kernel: EDAC MC: Ver: 3.0.0 Jul 10 00:37:59.372221 systemd[1]: Finished systemd-udev-settle.service. Jul 10 00:37:59.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.374054 systemd[1]: Starting lvm2-activation-early.service... Jul 10 00:37:59.381720 lvm[1049]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:37:59.409658 systemd[1]: Finished lvm2-activation-early.service. Jul 10 00:37:59.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.410638 systemd[1]: Reached target cryptsetup.target. Jul 10 00:37:59.412329 systemd[1]: Starting lvm2-activation.service... Jul 10 00:37:59.416104 lvm[1050]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:37:59.440520 systemd[1]: Finished lvm2-activation.service. Jul 10 00:37:59.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.441353 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:37:59.442139 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 10 00:37:59.442159 systemd[1]: Reached target local-fs.target. Jul 10 00:37:59.442919 systemd[1]: Reached target machines.target. Jul 10 00:37:59.444462 systemd[1]: Starting ldconfig.service... Jul 10 00:37:59.445310 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:37:59.445354 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:37:59.446149 systemd[1]: Starting systemd-boot-update.service... Jul 10 00:37:59.447757 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 10 00:37:59.449501 systemd[1]: Starting systemd-machine-id-commit.service... Jul 10 00:37:59.451189 systemd[1]: Starting systemd-sysext.service... Jul 10 00:37:59.454097 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1052 (bootctl) Jul 10 00:37:59.454859 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 10 00:37:59.459753 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 10 00:37:59.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.461093 systemd[1]: Unmounting usr-share-oem.mount... Jul 10 00:37:59.464499 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 10 00:37:59.464629 systemd[1]: Unmounted usr-share-oem.mount. Jul 10 00:37:59.472936 kernel: loop0: detected capacity change from 0 to 221472 Jul 10 00:37:59.504494 systemd-fsck[1060]: fsck.fat 4.2 (2021-01-31) Jul 10 00:37:59.504494 systemd-fsck[1060]: /dev/vda1: 791 files, 120751/258078 clusters Jul 10 00:37:59.505928 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 10 00:37:59.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.508292 systemd[1]: Mounting boot.mount... Jul 10 00:37:59.705022 systemd[1]: Mounted boot.mount. Jul 10 00:37:59.714939 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 10 00:37:59.716881 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 10 00:37:59.717381 systemd[1]: Finished systemd-machine-id-commit.service. Jul 10 00:37:59.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.720492 systemd[1]: Finished systemd-boot-update.service. Jul 10 00:37:59.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.728925 kernel: loop1: detected capacity change from 0 to 221472 Jul 10 00:37:59.732346 (sd-sysext)[1065]: Using extensions 'kubernetes'. Jul 10 00:37:59.732624 (sd-sysext)[1065]: Merged extensions into '/usr'. Jul 10 00:37:59.747829 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:37:59.749155 systemd[1]: Mounting usr-share-oem.mount... Jul 10 00:37:59.750145 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:37:59.751187 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:37:59.752994 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:37:59.754914 systemd[1]: Starting modprobe@loop.service... Jul 10 00:37:59.756023 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:37:59.756133 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:37:59.756228 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:37:59.758459 systemd[1]: Mounted usr-share-oem.mount. Jul 10 00:37:59.759666 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:37:59.759765 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:37:59.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.761091 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:37:59.761188 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:37:59.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.762481 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:37:59.762605 systemd[1]: Finished modprobe@loop.service. Jul 10 00:37:59.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.763000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.763892 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:37:59.764837 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:37:59.765090 systemd[1]: Finished systemd-sysext.service. Jul 10 00:37:59.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.767441 systemd[1]: Starting ensure-sysext.service... Jul 10 00:37:59.769019 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 10 00:37:59.769898 ldconfig[1051]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 10 00:37:59.773160 systemd[1]: Reloading. Jul 10 00:37:59.779397 systemd-tmpfiles[1072]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 00:37:59.781102 systemd-tmpfiles[1072]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 00:37:59.783489 systemd-tmpfiles[1072]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 00:37:59.827027 /usr/lib/systemd/system-generators/torcx-generator[1091]: time="2025-07-10T00:37:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:37:59.827342 /usr/lib/systemd/system-generators/torcx-generator[1091]: time="2025-07-10T00:37:59Z" level=info msg="torcx already run" Jul 10 00:37:59.886061 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:37:59.886077 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:37:59.902558 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:37:59.952000 audit: BPF prog-id=27 op=LOAD Jul 10 00:37:59.952000 audit: BPF prog-id=24 op=UNLOAD Jul 10 00:37:59.952000 audit: BPF prog-id=28 op=LOAD Jul 10 00:37:59.952000 audit: BPF prog-id=29 op=LOAD Jul 10 00:37:59.952000 audit: BPF prog-id=25 op=UNLOAD Jul 10 00:37:59.952000 audit: BPF prog-id=26 op=UNLOAD Jul 10 00:37:59.953000 audit: BPF prog-id=30 op=LOAD Jul 10 00:37:59.953000 audit: BPF prog-id=23 op=UNLOAD Jul 10 00:37:59.954000 audit: BPF prog-id=31 op=LOAD Jul 10 00:37:59.954000 audit: BPF prog-id=32 op=LOAD Jul 10 00:37:59.954000 audit: BPF prog-id=21 op=UNLOAD Jul 10 00:37:59.954000 audit: BPF prog-id=22 op=UNLOAD Jul 10 00:37:59.955000 audit: BPF prog-id=33 op=LOAD Jul 10 00:37:59.955000 audit: BPF prog-id=18 op=UNLOAD Jul 10 00:37:59.955000 audit: BPF prog-id=34 op=LOAD Jul 10 00:37:59.955000 audit: BPF prog-id=35 op=LOAD Jul 10 00:37:59.955000 audit: BPF prog-id=19 op=UNLOAD Jul 10 00:37:59.955000 audit: BPF prog-id=20 op=UNLOAD Jul 10 00:37:59.958294 systemd[1]: Finished ldconfig.service. Jul 10 00:37:59.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.960198 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 10 00:37:59.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.963616 systemd[1]: Starting audit-rules.service... Jul 10 00:37:59.965245 systemd[1]: Starting clean-ca-certificates.service... Jul 10 00:37:59.967335 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 10 00:37:59.968000 audit: BPF prog-id=36 op=LOAD Jul 10 00:37:59.970000 audit: BPF prog-id=37 op=LOAD Jul 10 00:37:59.969793 systemd[1]: Starting systemd-resolved.service... Jul 10 00:37:59.971745 systemd[1]: Starting systemd-timesyncd.service... Jul 10 00:37:59.973394 systemd[1]: Starting systemd-update-utmp.service... Jul 10 00:37:59.976308 systemd[1]: Finished clean-ca-certificates.service. Jul 10 00:37:59.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.977477 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:37:59.977000 audit[1143]: SYSTEM_BOOT pid=1143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.981913 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:37:59.982188 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:37:59.983371 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:37:59.985164 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:37:59.986874 systemd[1]: Starting modprobe@loop.service... Jul 10 00:37:59.987680 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:37:59.987822 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:37:59.988024 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:37:59.988145 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:37:59.989393 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 10 00:37:59.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.991173 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:37:59.991390 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:37:59.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.991000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:37:59.991000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 10 00:37:59.991000 audit[1157]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd54c03f30 a2=420 a3=0 items=0 ppid=1134 pid=1157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:37:59.991000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 10 00:37:59.992665 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:37:59.993014 augenrules[1157]: No rules Jul 10 00:37:59.993145 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:37:59.995630 systemd[1]: Finished audit-rules.service. Jul 10 00:37:59.996783 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:37:59.996897 systemd[1]: Finished modprobe@loop.service. Jul 10 00:37:59.998142 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:37:59.998252 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:37:59.999532 systemd[1]: Starting systemd-update-done.service... Jul 10 00:38:00.000771 systemd[1]: Finished systemd-update-utmp.service. Jul 10 00:38:00.003683 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:38:00.003856 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:38:00.004941 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:38:00.006559 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:38:00.008291 systemd[1]: Starting modprobe@loop.service... Jul 10 00:38:00.009029 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:38:00.009135 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:38:00.009239 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:38:00.009320 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:38:00.010216 systemd[1]: Finished systemd-update-done.service. Jul 10 00:38:00.011326 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:38:00.011430 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:38:00.012490 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:38:00.012586 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:38:00.013674 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:38:00.013764 systemd[1]: Finished modprobe@loop.service. Jul 10 00:38:00.014775 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:38:00.014851 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:38:00.017538 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:38:00.017800 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:38:00.018956 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:38:00.020592 systemd[1]: Starting modprobe@drm.service... Jul 10 00:38:00.022197 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:38:00.023857 systemd[1]: Starting modprobe@loop.service... Jul 10 00:38:00.024928 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:38:00.025030 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:38:00.026142 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 10 00:38:00.029983 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:38:00.030074 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:38:00.856554 systemd-timesyncd[1141]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 10 00:38:00.856594 systemd-timesyncd[1141]: Initial clock synchronization to Thu 2025-07-10 00:38:00.856497 UTC. Jul 10 00:38:00.856922 systemd[1]: Started systemd-timesyncd.service. Jul 10 00:38:00.858227 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:38:00.858337 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:38:00.859418 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:38:00.859517 systemd[1]: Finished modprobe@drm.service. Jul 10 00:38:00.860563 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:38:00.860658 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:38:00.861771 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:38:00.861889 systemd[1]: Finished modprobe@loop.service. Jul 10 00:38:00.863241 systemd[1]: Reached target time-set.target. Jul 10 00:38:00.864040 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:38:00.864068 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:38:00.864342 systemd[1]: Finished ensure-sysext.service. Jul 10 00:38:00.871838 systemd-resolved[1140]: Positive Trust Anchors: Jul 10 00:38:00.871861 systemd-resolved[1140]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:38:00.871887 systemd-resolved[1140]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:38:00.878645 systemd-resolved[1140]: Defaulting to hostname 'linux'. Jul 10 00:38:00.880003 systemd[1]: Started systemd-resolved.service. Jul 10 00:38:00.880895 systemd[1]: Reached target network.target. Jul 10 00:38:00.881651 systemd[1]: Reached target nss-lookup.target. Jul 10 00:38:00.882436 systemd[1]: Reached target sysinit.target. Jul 10 00:38:00.883249 systemd[1]: Started motdgen.path. Jul 10 00:38:00.883922 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 10 00:38:00.885069 systemd[1]: Started logrotate.timer. Jul 10 00:38:00.885826 systemd[1]: Started mdadm.timer. Jul 10 00:38:00.886476 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 10 00:38:00.887267 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 10 00:38:00.887289 systemd[1]: Reached target paths.target. Jul 10 00:38:00.887987 systemd[1]: Reached target timers.target. Jul 10 00:38:00.889000 systemd[1]: Listening on dbus.socket. Jul 10 00:38:00.890667 systemd[1]: Starting docker.socket... Jul 10 00:38:00.893370 systemd[1]: Listening on sshd.socket. Jul 10 00:38:00.894166 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:38:00.894491 systemd[1]: Listening on docker.socket. Jul 10 00:38:00.895261 systemd[1]: Reached target sockets.target. Jul 10 00:38:00.896023 systemd[1]: Reached target basic.target. Jul 10 00:38:00.896756 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:38:00.896779 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:38:00.897608 systemd[1]: Starting containerd.service... Jul 10 00:38:00.899342 systemd[1]: Starting dbus.service... Jul 10 00:38:00.900790 systemd[1]: Starting enable-oem-cloudinit.service... Jul 10 00:38:00.902397 systemd[1]: Starting extend-filesystems.service... Jul 10 00:38:00.903231 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 10 00:38:00.904181 systemd[1]: Starting motdgen.service... Jul 10 00:38:00.905710 systemd[1]: Starting prepare-helm.service... Jul 10 00:38:00.907572 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 10 00:38:00.909065 jq[1176]: false Jul 10 00:38:00.909272 systemd[1]: Starting sshd-keygen.service... Jul 10 00:38:00.911897 systemd[1]: Starting systemd-logind.service... Jul 10 00:38:00.912617 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:38:00.912673 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 10 00:38:00.912987 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 10 00:38:00.913509 systemd[1]: Starting update-engine.service... Jul 10 00:38:00.915077 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 10 00:38:00.917365 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 10 00:38:00.922311 jq[1191]: true Jul 10 00:38:00.917503 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 10 00:38:00.921632 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 10 00:38:00.921753 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 10 00:38:00.924236 extend-filesystems[1177]: Found loop1 Jul 10 00:38:00.924236 extend-filesystems[1177]: Found sr0 Jul 10 00:38:00.924236 extend-filesystems[1177]: Found vda Jul 10 00:38:00.924236 extend-filesystems[1177]: Found vda1 Jul 10 00:38:00.924236 extend-filesystems[1177]: Found vda2 Jul 10 00:38:00.924236 extend-filesystems[1177]: Found vda3 Jul 10 00:38:00.924236 extend-filesystems[1177]: Found usr Jul 10 00:38:00.924236 extend-filesystems[1177]: Found vda4 Jul 10 00:38:00.924236 extend-filesystems[1177]: Found vda6 Jul 10 00:38:00.924236 extend-filesystems[1177]: Found vda7 Jul 10 00:38:00.924236 extend-filesystems[1177]: Found vda9 Jul 10 00:38:00.924236 extend-filesystems[1177]: Checking size of /dev/vda9 Jul 10 00:38:00.935927 dbus-daemon[1175]: [system] SELinux support is enabled Jul 10 00:38:00.936470 tar[1195]: linux-amd64/helm Jul 10 00:38:00.931948 systemd[1]: motdgen.service: Deactivated successfully. Jul 10 00:38:00.932064 systemd[1]: Finished motdgen.service. Jul 10 00:38:00.936050 systemd[1]: Started dbus.service. Jul 10 00:38:00.939102 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 10 00:38:00.939126 systemd[1]: Reached target system-config.target. Jul 10 00:38:00.940001 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 10 00:38:00.940013 systemd[1]: Reached target user-config.target. Jul 10 00:38:00.949690 update_engine[1188]: I0710 00:38:00.949433 1188 main.cc:92] Flatcar Update Engine starting Jul 10 00:38:00.951052 systemd[1]: Started update-engine.service. Jul 10 00:38:00.951168 jq[1198]: true Jul 10 00:38:00.951577 update_engine[1188]: I0710 00:38:00.951562 1188 update_check_scheduler.cc:74] Next update check in 11m23s Jul 10 00:38:00.953664 systemd[1]: Started locksmithd.service. Jul 10 00:38:00.954692 extend-filesystems[1177]: Resized partition /dev/vda9 Jul 10 00:38:00.960286 extend-filesystems[1213]: resize2fs 1.46.5 (30-Dec-2021) Jul 10 00:38:00.972888 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 10 00:38:00.976128 env[1196]: time="2025-07-10T00:38:00.976082341Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 10 00:38:00.999441 systemd-logind[1186]: Watching system buttons on /dev/input/event1 (Power Button) Jul 10 00:38:00.999720 systemd-logind[1186]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 10 00:38:01.000079 systemd-logind[1186]: New seat seat0. Jul 10 00:38:01.004330 systemd[1]: Started systemd-logind.service. Jul 10 00:38:01.621830 env[1196]: time="2025-07-10T00:38:01.013286108Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 10 00:38:01.621830 env[1196]: time="2025-07-10T00:38:01.013417434Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:38:01.621830 env[1196]: time="2025-07-10T00:38:01.015389694Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:38:01.621830 env[1196]: time="2025-07-10T00:38:01.015410844Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:38:01.621830 env[1196]: time="2025-07-10T00:38:01.015549925Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:38:01.621830 env[1196]: time="2025-07-10T00:38:01.015563310Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 10 00:38:01.621830 env[1196]: time="2025-07-10T00:38:01.015575062Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 10 00:38:01.621830 env[1196]: time="2025-07-10T00:38:01.015584981Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 10 00:38:01.621830 env[1196]: time="2025-07-10T00:38:01.015641196Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:38:01.621830 env[1196]: time="2025-07-10T00:38:01.015813630Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:38:01.442970 systemd-networkd[1025]: eth0: Gained IPv6LL Jul 10 00:38:01.622327 tar[1195]: linux-amd64/LICENSE Jul 10 00:38:01.622327 tar[1195]: linux-amd64/README.md Jul 10 00:38:01.622382 env[1196]: time="2025-07-10T00:38:01.015924107Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:38:01.622382 env[1196]: time="2025-07-10T00:38:01.015936881Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 10 00:38:01.622382 env[1196]: time="2025-07-10T00:38:01.015975523Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 10 00:38:01.622382 env[1196]: time="2025-07-10T00:38:01.015986073Z" level=info msg="metadata content store policy set" policy=shared Jul 10 00:38:01.623278 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 10 00:38:01.625721 systemd[1]: Reached target network-online.target. Jul 10 00:38:01.655006 systemd[1]: Starting kubelet.service... Jul 10 00:38:01.656469 systemd[1]: Finished prepare-helm.service. Jul 10 00:38:01.716879 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 10 00:38:01.745593 extend-filesystems[1213]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 10 00:38:01.745593 extend-filesystems[1213]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 10 00:38:01.745593 extend-filesystems[1213]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 10 00:38:01.752606 extend-filesystems[1177]: Resized filesystem in /dev/vda9 Jul 10 00:38:01.747196 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 10 00:38:01.753875 sshd_keygen[1201]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 10 00:38:01.747357 systemd[1]: Finished extend-filesystems.service. Jul 10 00:38:01.754199 env[1196]: time="2025-07-10T00:38:01.754101029Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 10 00:38:01.754199 env[1196]: time="2025-07-10T00:38:01.754155993Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 10 00:38:01.754199 env[1196]: time="2025-07-10T00:38:01.754171802Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 10 00:38:01.754285 env[1196]: time="2025-07-10T00:38:01.754263524Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 10 00:38:01.754308 env[1196]: time="2025-07-10T00:38:01.754282660Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 10 00:38:01.754345 env[1196]: time="2025-07-10T00:38:01.754311404Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 10 00:38:01.754345 env[1196]: time="2025-07-10T00:38:01.754323507Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 10 00:38:01.754384 env[1196]: time="2025-07-10T00:38:01.754354144Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 10 00:38:01.754384 env[1196]: time="2025-07-10T00:38:01.754379973Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 10 00:38:01.754421 env[1196]: time="2025-07-10T00:38:01.754395171Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 10 00:38:01.754421 env[1196]: time="2025-07-10T00:38:01.754406232Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 10 00:38:01.754421 env[1196]: time="2025-07-10T00:38:01.754416311Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.754566613Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.754693411Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.755075858Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.755104813Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.755132895Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.755182849Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.755218255Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.755230819Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.755241519Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.755328111Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755368 env[1196]: time="2025-07-10T00:38:01.755368858Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755616 env[1196]: time="2025-07-10T00:38:01.755383566Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755616 env[1196]: time="2025-07-10T00:38:01.755397171Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755616 env[1196]: time="2025-07-10T00:38:01.755410286Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 10 00:38:01.755616 env[1196]: time="2025-07-10T00:38:01.755547213Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755616 env[1196]: time="2025-07-10T00:38:01.755562511Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755616 env[1196]: time="2025-07-10T00:38:01.755588420Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.755616 env[1196]: time="2025-07-10T00:38:01.755601835Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 10 00:38:01.755750 env[1196]: time="2025-07-10T00:38:01.755621161Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 10 00:38:01.755750 env[1196]: time="2025-07-10T00:38:01.755632963Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 10 00:38:01.755750 env[1196]: time="2025-07-10T00:38:01.755673830Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 10 00:38:01.755750 env[1196]: time="2025-07-10T00:38:01.755708926Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 10 00:38:01.756165 env[1196]: time="2025-07-10T00:38:01.756048323Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.756200208Z" level=info msg="Connect containerd service" Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.756261182Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.767693049Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.767936636Z" level=info msg="Start subscribing containerd event" Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.768103389Z" level=info msg="Start recovering state" Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.768133265Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.768176215Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.768248170Z" level=info msg="Start event monitor" Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.768275442Z" level=info msg="containerd successfully booted in 0.792822s" Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.768558312Z" level=info msg="Start snapshots syncer" Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.768606653Z" level=info msg="Start cni network conf syncer for default" Jul 10 00:38:01.787428 env[1196]: time="2025-07-10T00:38:01.768618465Z" level=info msg="Start streaming server" Jul 10 00:38:01.768408 systemd[1]: Started containerd.service. Jul 10 00:38:01.788810 systemd[1]: Finished sshd-keygen.service. Jul 10 00:38:01.790998 systemd[1]: Starting issuegen.service... Jul 10 00:38:01.796045 systemd[1]: issuegen.service: Deactivated successfully. Jul 10 00:38:01.796160 systemd[1]: Finished issuegen.service. Jul 10 00:38:01.797944 systemd[1]: Starting systemd-user-sessions.service... Jul 10 00:38:01.854202 systemd[1]: Finished systemd-user-sessions.service. Jul 10 00:38:01.856476 systemd[1]: Started getty@tty1.service. Jul 10 00:38:01.858107 systemd[1]: Started serial-getty@ttyS0.service. Jul 10 00:38:01.859095 systemd[1]: Reached target getty.target. Jul 10 00:38:01.860890 locksmithd[1212]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 10 00:38:02.012034 bash[1229]: Updated "/home/core/.ssh/authorized_keys" Jul 10 00:38:02.012728 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 10 00:38:03.296401 systemd[1]: Started kubelet.service. Jul 10 00:38:03.297677 systemd[1]: Reached target multi-user.target. Jul 10 00:38:03.299894 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 10 00:38:03.307297 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 10 00:38:03.307444 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 10 00:38:03.308542 systemd[1]: Startup finished in 590ms (kernel) + 4.982s (initrd) + 6.789s (userspace) = 12.362s. Jul 10 00:38:04.012281 kubelet[1256]: E0710 00:38:04.012192 1256 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:38:04.014090 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:38:04.014327 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:38:04.014615 systemd[1]: kubelet.service: Consumed 2.110s CPU time. Jul 10 00:38:04.987233 systemd[1]: Created slice system-sshd.slice. Jul 10 00:38:04.988350 systemd[1]: Started sshd@0-10.0.0.42:22-10.0.0.1:33498.service. Jul 10 00:38:05.021514 sshd[1265]: Accepted publickey for core from 10.0.0.1 port 33498 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:38:05.022809 sshd[1265]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:05.030324 systemd-logind[1186]: New session 1 of user core. Jul 10 00:38:05.031229 systemd[1]: Created slice user-500.slice. Jul 10 00:38:05.032137 systemd[1]: Starting user-runtime-dir@500.service... Jul 10 00:38:05.039350 systemd[1]: Finished user-runtime-dir@500.service. Jul 10 00:38:05.040532 systemd[1]: Starting user@500.service... Jul 10 00:38:05.042766 (systemd)[1268]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:05.109279 systemd[1268]: Queued start job for default target default.target. Jul 10 00:38:05.109649 systemd[1268]: Reached target paths.target. Jul 10 00:38:05.109667 systemd[1268]: Reached target sockets.target. Jul 10 00:38:05.109679 systemd[1268]: Reached target timers.target. Jul 10 00:38:05.109690 systemd[1268]: Reached target basic.target. Jul 10 00:38:05.109721 systemd[1268]: Reached target default.target. Jul 10 00:38:05.109741 systemd[1268]: Startup finished in 62ms. Jul 10 00:38:05.109798 systemd[1]: Started user@500.service. Jul 10 00:38:05.110608 systemd[1]: Started session-1.scope. Jul 10 00:38:05.160578 systemd[1]: Started sshd@1-10.0.0.42:22-10.0.0.1:33508.service. Jul 10 00:38:05.192923 sshd[1277]: Accepted publickey for core from 10.0.0.1 port 33508 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:38:05.194168 sshd[1277]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:05.197608 systemd-logind[1186]: New session 2 of user core. Jul 10 00:38:05.198550 systemd[1]: Started session-2.scope. Jul 10 00:38:05.250619 sshd[1277]: pam_unix(sshd:session): session closed for user core Jul 10 00:38:05.252755 systemd[1]: sshd@1-10.0.0.42:22-10.0.0.1:33508.service: Deactivated successfully. Jul 10 00:38:05.253228 systemd[1]: session-2.scope: Deactivated successfully. Jul 10 00:38:05.253720 systemd-logind[1186]: Session 2 logged out. Waiting for processes to exit. Jul 10 00:38:05.254439 systemd[1]: Started sshd@2-10.0.0.42:22-10.0.0.1:33522.service. Jul 10 00:38:05.255008 systemd-logind[1186]: Removed session 2. Jul 10 00:38:05.284019 sshd[1283]: Accepted publickey for core from 10.0.0.1 port 33522 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:38:05.284881 sshd[1283]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:05.288019 systemd-logind[1186]: New session 3 of user core. Jul 10 00:38:05.288630 systemd[1]: Started session-3.scope. Jul 10 00:38:05.338001 sshd[1283]: pam_unix(sshd:session): session closed for user core Jul 10 00:38:05.341664 systemd[1]: Started sshd@3-10.0.0.42:22-10.0.0.1:33534.service. Jul 10 00:38:05.342283 systemd[1]: sshd@2-10.0.0.42:22-10.0.0.1:33522.service: Deactivated successfully. Jul 10 00:38:05.342920 systemd[1]: session-3.scope: Deactivated successfully. Jul 10 00:38:05.343484 systemd-logind[1186]: Session 3 logged out. Waiting for processes to exit. Jul 10 00:38:05.344255 systemd-logind[1186]: Removed session 3. Jul 10 00:38:05.371062 sshd[1288]: Accepted publickey for core from 10.0.0.1 port 33534 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:38:05.372030 sshd[1288]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:05.374838 systemd-logind[1186]: New session 4 of user core. Jul 10 00:38:05.375677 systemd[1]: Started session-4.scope. Jul 10 00:38:05.427549 sshd[1288]: pam_unix(sshd:session): session closed for user core Jul 10 00:38:05.429921 systemd[1]: sshd@3-10.0.0.42:22-10.0.0.1:33534.service: Deactivated successfully. Jul 10 00:38:05.430407 systemd[1]: session-4.scope: Deactivated successfully. Jul 10 00:38:05.430841 systemd-logind[1186]: Session 4 logged out. Waiting for processes to exit. Jul 10 00:38:05.431783 systemd[1]: Started sshd@4-10.0.0.42:22-10.0.0.1:33536.service. Jul 10 00:38:05.432438 systemd-logind[1186]: Removed session 4. Jul 10 00:38:05.461056 sshd[1296]: Accepted publickey for core from 10.0.0.1 port 33536 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:38:05.462012 sshd[1296]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:05.464723 systemd-logind[1186]: New session 5 of user core. Jul 10 00:38:05.465451 systemd[1]: Started session-5.scope. Jul 10 00:38:05.519446 sudo[1299]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 10 00:38:05.519627 sudo[1299]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:38:05.533044 dbus-daemon[1175]: \xd0\xedq\x86\xa8U: received setenforce notice (enforcing=465308544) Jul 10 00:38:05.534939 sudo[1299]: pam_unix(sudo:session): session closed for user root Jul 10 00:38:05.536351 sshd[1296]: pam_unix(sshd:session): session closed for user core Jul 10 00:38:05.538965 systemd[1]: sshd@4-10.0.0.42:22-10.0.0.1:33536.service: Deactivated successfully. Jul 10 00:38:05.539421 systemd[1]: session-5.scope: Deactivated successfully. Jul 10 00:38:05.539975 systemd-logind[1186]: Session 5 logged out. Waiting for processes to exit. Jul 10 00:38:05.540752 systemd[1]: Started sshd@5-10.0.0.42:22-10.0.0.1:33544.service. Jul 10 00:38:05.541409 systemd-logind[1186]: Removed session 5. Jul 10 00:38:05.570328 sshd[1303]: Accepted publickey for core from 10.0.0.1 port 33544 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:38:05.571302 sshd[1303]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:05.573940 systemd-logind[1186]: New session 6 of user core. Jul 10 00:38:05.574748 systemd[1]: Started session-6.scope. Jul 10 00:38:05.625575 sudo[1308]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 10 00:38:05.625753 sudo[1308]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:38:05.627796 sudo[1308]: pam_unix(sudo:session): session closed for user root Jul 10 00:38:05.631919 sudo[1307]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 10 00:38:05.632095 sudo[1307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:38:05.639356 systemd[1]: Stopping audit-rules.service... Jul 10 00:38:05.639000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:38:05.640507 auditctl[1311]: No rules Jul 10 00:38:05.640675 systemd[1]: audit-rules.service: Deactivated successfully. Jul 10 00:38:05.640792 systemd[1]: Stopped audit-rules.service. Jul 10 00:38:05.641876 kernel: kauditd_printk_skb: 269 callbacks suppressed Jul 10 00:38:05.641924 kernel: audit: type=1305 audit(1752107885.639:188): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:38:05.639000 audit[1311]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff10f23920 a2=420 a3=0 items=0 ppid=1 pid=1311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:05.643358 systemd[1]: Starting audit-rules.service... Jul 10 00:38:05.647052 kernel: audit: type=1300 audit(1752107885.639:188): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff10f23920 a2=420 a3=0 items=0 ppid=1 pid=1311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:05.647101 kernel: audit: type=1327 audit(1752107885.639:188): proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:38:05.639000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:38:05.648297 kernel: audit: type=1131 audit(1752107885.639:189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.658492 augenrules[1328]: No rules Jul 10 00:38:05.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.660077 sudo[1307]: pam_unix(sudo:session): session closed for user root Jul 10 00:38:05.659007 systemd[1]: Finished audit-rules.service. Jul 10 00:38:05.661313 sshd[1303]: pam_unix(sshd:session): session closed for user core Jul 10 00:38:05.659000 audit[1307]: USER_END pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.663944 systemd[1]: sshd@5-10.0.0.42:22-10.0.0.1:33544.service: Deactivated successfully. Jul 10 00:38:05.664427 systemd[1]: session-6.scope: Deactivated successfully. Jul 10 00:38:05.666875 kernel: audit: type=1130 audit(1752107885.658:190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.666935 kernel: audit: type=1106 audit(1752107885.659:191): pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.666960 kernel: audit: type=1104 audit(1752107885.659:192): pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.659000 audit[1307]: CRED_DISP pid=1307 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.665867 systemd[1]: Started sshd@6-10.0.0.42:22-10.0.0.1:33552.service. Jul 10 00:38:05.665904 systemd-logind[1186]: Session 6 logged out. Waiting for processes to exit. Jul 10 00:38:05.667122 systemd-logind[1186]: Removed session 6. Jul 10 00:38:05.661000 audit[1303]: USER_END pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:05.672725 kernel: audit: type=1106 audit(1752107885.661:193): pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:05.672761 kernel: audit: type=1104 audit(1752107885.661:194): pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:05.661000 audit[1303]: CRED_DISP pid=1303 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:05.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.42:22-10.0.0.1:33544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.679189 kernel: audit: type=1131 audit(1752107885.663:195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.42:22-10.0.0.1:33544 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.42:22-10.0.0.1:33552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.697000 audit[1334]: USER_ACCT pid=1334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:05.698000 sshd[1334]: Accepted publickey for core from 10.0.0.1 port 33552 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:38:05.697000 audit[1334]: CRED_ACQ pid=1334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:05.697000 audit[1334]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff56f40b90 a2=3 a3=0 items=0 ppid=1 pid=1334 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:05.697000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:38:05.698954 sshd[1334]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:38:05.702074 systemd-logind[1186]: New session 7 of user core. Jul 10 00:38:05.702941 systemd[1]: Started session-7.scope. Jul 10 00:38:05.706000 audit[1334]: USER_START pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:05.707000 audit[1336]: CRED_ACQ pid=1336 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:05.753000 audit[1337]: USER_ACCT pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.754666 sudo[1337]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 10 00:38:05.753000 audit[1337]: CRED_REFR pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.754855 sudo[1337]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:38:05.755000 audit[1337]: USER_START pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:05.783420 systemd[1]: Starting docker.service... Jul 10 00:38:05.840687 env[1349]: time="2025-07-10T00:38:05.840633957Z" level=info msg="Starting up" Jul 10 00:38:05.841973 env[1349]: time="2025-07-10T00:38:05.841927053Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:38:05.841973 env[1349]: time="2025-07-10T00:38:05.841958472Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:38:05.842093 env[1349]: time="2025-07-10T00:38:05.841983970Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:38:05.842093 env[1349]: time="2025-07-10T00:38:05.841997996Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:38:05.843867 env[1349]: time="2025-07-10T00:38:05.843825044Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:38:05.843867 env[1349]: time="2025-07-10T00:38:05.843854098Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:38:05.843930 env[1349]: time="2025-07-10T00:38:05.843870038Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:38:05.843930 env[1349]: time="2025-07-10T00:38:05.843882151Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:38:06.435942 env[1349]: time="2025-07-10T00:38:06.435879540Z" level=info msg="Loading containers: start." Jul 10 00:38:06.495000 audit[1383]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.495000 audit[1383]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd8aa19d30 a2=0 a3=7ffd8aa19d1c items=0 ppid=1349 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.495000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 10 00:38:06.497000 audit[1385]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.497000 audit[1385]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe24693f20 a2=0 a3=7ffe24693f0c items=0 ppid=1349 pid=1385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.497000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 10 00:38:06.499000 audit[1387]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1387 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.499000 audit[1387]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff175c8d20 a2=0 a3=7fff175c8d0c items=0 ppid=1349 pid=1387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.499000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:38:06.500000 audit[1389]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.500000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffea05552b0 a2=0 a3=7ffea055529c items=0 ppid=1349 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.500000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:38:06.502000 audit[1391]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.502000 audit[1391]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd2a670750 a2=0 a3=7ffd2a67073c items=0 ppid=1349 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.502000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 10 00:38:06.519000 audit[1396]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.519000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffde6384560 a2=0 a3=7ffde638454c items=0 ppid=1349 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.519000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 10 00:38:06.529000 audit[1398]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.529000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd5af24230 a2=0 a3=7ffd5af2421c items=0 ppid=1349 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.529000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 10 00:38:06.530000 audit[1400]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.530000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc2255d050 a2=0 a3=7ffc2255d03c items=0 ppid=1349 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.530000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 10 00:38:06.532000 audit[1402]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.532000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffc04e78a00 a2=0 a3=7ffc04e789ec items=0 ppid=1349 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.532000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:38:06.540000 audit[1406]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.540000 audit[1406]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd8b39b1a0 a2=0 a3=7ffd8b39b18c items=0 ppid=1349 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.540000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:38:06.545000 audit[1407]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.545000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe705bdab0 a2=0 a3=7ffe705bda9c items=0 ppid=1349 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.545000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:38:06.555869 kernel: Initializing XFRM netlink socket Jul 10 00:38:06.662746 env[1349]: time="2025-07-10T00:38:06.662695543Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 10 00:38:06.681000 audit[1415]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.681000 audit[1415]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd61f1ba70 a2=0 a3=7ffd61f1ba5c items=0 ppid=1349 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.681000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 10 00:38:06.691000 audit[1418]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.691000 audit[1418]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc3aefb0e0 a2=0 a3=7ffc3aefb0cc items=0 ppid=1349 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.691000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 10 00:38:06.694000 audit[1421]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.694000 audit[1421]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff4a483e70 a2=0 a3=7fff4a483e5c items=0 ppid=1349 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.694000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 10 00:38:06.695000 audit[1423]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.695000 audit[1423]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcab150350 a2=0 a3=7ffcab15033c items=0 ppid=1349 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.695000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 10 00:38:06.697000 audit[1425]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.697000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fffcc1c7d80 a2=0 a3=7fffcc1c7d6c items=0 ppid=1349 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.697000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 10 00:38:06.699000 audit[1427]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.699000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd587c7290 a2=0 a3=7ffd587c727c items=0 ppid=1349 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.699000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 10 00:38:06.700000 audit[1429]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.700000 audit[1429]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fff0378d330 a2=0 a3=7fff0378d31c items=0 ppid=1349 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.700000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 10 00:38:06.706000 audit[1432]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.706000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffce891b560 a2=0 a3=7ffce891b54c items=0 ppid=1349 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.706000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 10 00:38:06.708000 audit[1434]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.708000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd1224e190 a2=0 a3=7ffd1224e17c items=0 ppid=1349 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.708000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:38:06.709000 audit[1436]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.709000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff007b75b0 a2=0 a3=7fff007b759c items=0 ppid=1349 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.709000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:38:06.711000 audit[1438]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.711000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff926a6f00 a2=0 a3=7fff926a6eec items=0 ppid=1349 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.711000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 10 00:38:06.713011 systemd-networkd[1025]: docker0: Link UP Jul 10 00:38:06.720000 audit[1442]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.720000 audit[1442]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffb7285080 a2=0 a3=7fffb728506c items=0 ppid=1349 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.720000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:38:06.725000 audit[1443]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:06.725000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff53145a30 a2=0 a3=7fff53145a1c items=0 ppid=1349 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:06.725000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:38:06.726485 env[1349]: time="2025-07-10T00:38:06.726445282Z" level=info msg="Loading containers: done." Jul 10 00:38:06.736801 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2074737125-merged.mount: Deactivated successfully. Jul 10 00:38:06.742409 env[1349]: time="2025-07-10T00:38:06.742361562Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 10 00:38:06.742591 env[1349]: time="2025-07-10T00:38:06.742561347Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 10 00:38:06.742697 env[1349]: time="2025-07-10T00:38:06.742676413Z" level=info msg="Daemon has completed initialization" Jul 10 00:38:06.766780 systemd[1]: Started docker.service. Jul 10 00:38:06.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:06.777411 env[1349]: time="2025-07-10T00:38:06.777332871Z" level=info msg="API listen on /run/docker.sock" Jul 10 00:38:07.776710 env[1196]: time="2025-07-10T00:38:07.776666753Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 10 00:38:08.529507 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3361196476.mount: Deactivated successfully. Jul 10 00:38:10.357042 env[1196]: time="2025-07-10T00:38:10.356984533Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:10.358890 env[1196]: time="2025-07-10T00:38:10.358861785Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:10.360868 env[1196]: time="2025-07-10T00:38:10.360809589Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:10.362954 env[1196]: time="2025-07-10T00:38:10.362916191Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:10.363857 env[1196]: time="2025-07-10T00:38:10.363806952Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977\"" Jul 10 00:38:10.364566 env[1196]: time="2025-07-10T00:38:10.364544847Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 10 00:38:12.198502 env[1196]: time="2025-07-10T00:38:12.198438352Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:12.200696 env[1196]: time="2025-07-10T00:38:12.200659308Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:12.202428 env[1196]: time="2025-07-10T00:38:12.202387811Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:12.203872 env[1196]: time="2025-07-10T00:38:12.203831269Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:12.204540 env[1196]: time="2025-07-10T00:38:12.204505644Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d\"" Jul 10 00:38:12.205086 env[1196]: time="2025-07-10T00:38:12.205034146Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 10 00:38:13.878983 env[1196]: time="2025-07-10T00:38:13.878924995Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:13.880891 env[1196]: time="2025-07-10T00:38:13.880867168Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:13.882568 env[1196]: time="2025-07-10T00:38:13.882530399Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:13.884268 env[1196]: time="2025-07-10T00:38:13.884239996Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:13.884905 env[1196]: time="2025-07-10T00:38:13.884877121Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2\"" Jul 10 00:38:13.885384 env[1196]: time="2025-07-10T00:38:13.885360378Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 10 00:38:14.265114 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 10 00:38:14.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:14.265290 systemd[1]: Stopped kubelet.service. Jul 10 00:38:14.265336 systemd[1]: kubelet.service: Consumed 2.110s CPU time. Jul 10 00:38:14.266313 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 10 00:38:14.266371 kernel: audit: type=1130 audit(1752107894.264:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:14.266682 systemd[1]: Starting kubelet.service... Jul 10 00:38:14.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:14.272040 kernel: audit: type=1131 audit(1752107894.264:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:14.399953 systemd[1]: Started kubelet.service. Jul 10 00:38:14.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:14.403869 kernel: audit: type=1130 audit(1752107894.399:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:14.632476 kubelet[1485]: E0710 00:38:14.632362 1485 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:38:14.634955 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:38:14.635067 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:38:14.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:38:14.638870 kernel: audit: type=1131 audit(1752107894.634:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:38:15.334090 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3246418227.mount: Deactivated successfully. Jul 10 00:38:16.403925 env[1196]: time="2025-07-10T00:38:16.403836258Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:16.405824 env[1196]: time="2025-07-10T00:38:16.405783682Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:16.407812 env[1196]: time="2025-07-10T00:38:16.407775689Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:16.409412 env[1196]: time="2025-07-10T00:38:16.409373026Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:16.409827 env[1196]: time="2025-07-10T00:38:16.409788145Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c\"" Jul 10 00:38:16.410269 env[1196]: time="2025-07-10T00:38:16.410252185Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 10 00:38:16.899770 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3020472520.mount: Deactivated successfully. Jul 10 00:38:17.851816 env[1196]: time="2025-07-10T00:38:17.851750379Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:17.853513 env[1196]: time="2025-07-10T00:38:17.853457461Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:17.855430 env[1196]: time="2025-07-10T00:38:17.855409794Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:17.857465 env[1196]: time="2025-07-10T00:38:17.857435244Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:17.858521 env[1196]: time="2025-07-10T00:38:17.858473031Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 10 00:38:17.859078 env[1196]: time="2025-07-10T00:38:17.859050394Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 10 00:38:18.334265 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2148723051.mount: Deactivated successfully. Jul 10 00:38:18.340657 env[1196]: time="2025-07-10T00:38:18.340603833Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:18.343075 env[1196]: time="2025-07-10T00:38:18.343045553Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:18.344657 env[1196]: time="2025-07-10T00:38:18.344625047Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:18.346110 env[1196]: time="2025-07-10T00:38:18.346075498Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:18.346464 env[1196]: time="2025-07-10T00:38:18.346423461Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 10 00:38:18.346889 env[1196]: time="2025-07-10T00:38:18.346859278Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 10 00:38:18.857826 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3783042194.mount: Deactivated successfully. Jul 10 00:38:21.833391 env[1196]: time="2025-07-10T00:38:21.833331549Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:21.835470 env[1196]: time="2025-07-10T00:38:21.835445215Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:21.837692 env[1196]: time="2025-07-10T00:38:21.837650091Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:21.839995 env[1196]: time="2025-07-10T00:38:21.839962609Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:21.841080 env[1196]: time="2025-07-10T00:38:21.841038738Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Jul 10 00:38:24.640728 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 10 00:38:24.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:24.640934 systemd[1]: Stopped kubelet.service. Jul 10 00:38:24.642128 systemd[1]: Starting kubelet.service... Jul 10 00:38:24.642775 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 10 00:38:24.642823 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 10 00:38:24.642971 systemd[1]: Stopped kubelet.service. Jul 10 00:38:24.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:24.644930 systemd[1]: Starting kubelet.service... Jul 10 00:38:24.647780 kernel: audit: type=1130 audit(1752107904.640:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:24.647866 kernel: audit: type=1131 audit(1752107904.640:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:24.647891 kernel: audit: type=1130 audit(1752107904.642:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:38:24.642000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:38:24.667248 systemd[1]: Reloading. Jul 10 00:38:24.734358 /usr/lib/systemd/system-generators/torcx-generator[1541]: time="2025-07-10T00:38:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:38:24.734382 /usr/lib/systemd/system-generators/torcx-generator[1541]: time="2025-07-10T00:38:24Z" level=info msg="torcx already run" Jul 10 00:38:24.991752 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:38:24.991768 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:38:25.008651 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:38:25.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077697 kernel: audit: type=1400 audit(1752107905.071:237): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077750 kernel: audit: type=1400 audit(1752107905.071:238): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077767 kernel: audit: type=1400 audit(1752107905.071:239): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.083172 kernel: audit: type=1400 audit(1752107905.071:240): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.083214 kernel: audit: type=1400 audit(1752107905.071:241): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.085931 kernel: audit: type=1400 audit(1752107905.071:242): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.088684 kernel: audit: type=1400 audit(1752107905.071:243): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.071000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.076000 audit: BPF prog-id=43 op=LOAD Jul 10 00:38:25.076000 audit: BPF prog-id=37 op=UNLOAD Jul 10 00:38:25.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.082000 audit: BPF prog-id=44 op=LOAD Jul 10 00:38:25.082000 audit: BPF prog-id=41 op=UNLOAD Jul 10 00:38:25.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.087000 audit: BPF prog-id=45 op=LOAD Jul 10 00:38:25.087000 audit: BPF prog-id=38 op=UNLOAD Jul 10 00:38:25.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.087000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit: BPF prog-id=46 op=LOAD Jul 10 00:38:25.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.090000 audit: BPF prog-id=47 op=LOAD Jul 10 00:38:25.090000 audit: BPF prog-id=39 op=UNLOAD Jul 10 00:38:25.090000 audit: BPF prog-id=40 op=UNLOAD Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit: BPF prog-id=48 op=LOAD Jul 10 00:38:25.091000 audit: BPF prog-id=27 op=UNLOAD Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit: BPF prog-id=49 op=LOAD Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.091000 audit: BPF prog-id=50 op=LOAD Jul 10 00:38:25.091000 audit: BPF prog-id=28 op=UNLOAD Jul 10 00:38:25.091000 audit: BPF prog-id=29 op=UNLOAD Jul 10 00:38:25.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.092000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.092000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.092000 audit: BPF prog-id=51 op=LOAD Jul 10 00:38:25.092000 audit: BPF prog-id=36 op=UNLOAD Jul 10 00:38:25.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.093000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.093000 audit: BPF prog-id=52 op=LOAD Jul 10 00:38:25.093000 audit: BPF prog-id=30 op=UNLOAD Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit: BPF prog-id=53 op=LOAD Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.094000 audit: BPF prog-id=54 op=LOAD Jul 10 00:38:25.094000 audit: BPF prog-id=31 op=UNLOAD Jul 10 00:38:25.094000 audit: BPF prog-id=32 op=UNLOAD Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit: BPF prog-id=55 op=LOAD Jul 10 00:38:25.095000 audit: BPF prog-id=33 op=UNLOAD Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit: BPF prog-id=56 op=LOAD Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.095000 audit: BPF prog-id=57 op=LOAD Jul 10 00:38:25.095000 audit: BPF prog-id=34 op=UNLOAD Jul 10 00:38:25.095000 audit: BPF prog-id=35 op=UNLOAD Jul 10 00:38:25.106112 systemd[1]: Started kubelet.service. Jul 10 00:38:25.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:25.107202 systemd[1]: Stopping kubelet.service... Jul 10 00:38:25.107415 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:38:25.107556 systemd[1]: Stopped kubelet.service. Jul 10 00:38:25.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:25.108827 systemd[1]: Starting kubelet.service... Jul 10 00:38:25.191561 systemd[1]: Started kubelet.service. Jul 10 00:38:25.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:25.310406 kubelet[1589]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:38:25.310406 kubelet[1589]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 10 00:38:25.310406 kubelet[1589]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:38:25.310767 kubelet[1589]: I0710 00:38:25.310404 1589 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:38:25.583929 kubelet[1589]: I0710 00:38:25.583817 1589 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 10 00:38:25.583929 kubelet[1589]: I0710 00:38:25.583865 1589 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:38:25.584187 kubelet[1589]: I0710 00:38:25.584162 1589 server.go:934] "Client rotation is on, will bootstrap in background" Jul 10 00:38:25.602522 kubelet[1589]: E0710 00:38:25.602470 1589 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.42:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:25.603206 kubelet[1589]: I0710 00:38:25.603181 1589 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:38:25.611915 kubelet[1589]: E0710 00:38:25.611891 1589 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:38:25.611915 kubelet[1589]: I0710 00:38:25.611914 1589 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:38:25.687959 kubelet[1589]: I0710 00:38:25.687909 1589 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:38:25.688737 kubelet[1589]: I0710 00:38:25.688710 1589 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 10 00:38:25.688933 kubelet[1589]: I0710 00:38:25.688886 1589 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:38:25.689191 kubelet[1589]: I0710 00:38:25.688927 1589 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:38:25.689302 kubelet[1589]: I0710 00:38:25.689201 1589 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:38:25.689302 kubelet[1589]: I0710 00:38:25.689213 1589 container_manager_linux.go:300] "Creating device plugin manager" Jul 10 00:38:25.689369 kubelet[1589]: I0710 00:38:25.689357 1589 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:38:25.701685 kubelet[1589]: I0710 00:38:25.701651 1589 kubelet.go:408] "Attempting to sync node with API server" Jul 10 00:38:25.701733 kubelet[1589]: I0710 00:38:25.701706 1589 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:38:25.701765 kubelet[1589]: I0710 00:38:25.701761 1589 kubelet.go:314] "Adding apiserver pod source" Jul 10 00:38:25.701804 kubelet[1589]: I0710 00:38:25.701787 1589 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:38:25.702016 kubelet[1589]: W0710 00:38:25.701893 1589 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.42:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.42:6443: connect: connection refused Jul 10 00:38:25.702074 kubelet[1589]: E0710 00:38:25.702047 1589 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.42:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:25.704763 kubelet[1589]: I0710 00:38:25.704737 1589 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:38:25.705236 kubelet[1589]: I0710 00:38:25.705221 1589 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 00:38:25.712013 kubelet[1589]: W0710 00:38:25.711984 1589 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.42:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.42:6443: connect: connection refused Jul 10 00:38:25.712066 kubelet[1589]: E0710 00:38:25.712028 1589 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.42:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:25.713590 kubelet[1589]: W0710 00:38:25.713565 1589 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 10 00:38:25.716154 kubelet[1589]: I0710 00:38:25.716130 1589 server.go:1274] "Started kubelet" Jul 10 00:38:25.716689 kubelet[1589]: I0710 00:38:25.716409 1589 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:38:25.716789 kubelet[1589]: I0710 00:38:25.716767 1589 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:38:25.716917 kubelet[1589]: I0710 00:38:25.716891 1589 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:38:25.716000 audit[1589]: AVC avc: denied { mac_admin } for pid=1589 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.716000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:38:25.716000 audit[1589]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cb2570 a1=c00067e930 a2=c000cb2540 a3=25 items=0 ppid=1 pid=1589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.716000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:38:25.716000 audit[1589]: AVC avc: denied { mac_admin } for pid=1589 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:25.716000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:38:25.716000 audit[1589]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00043fb40 a1=c00067e948 a2=c000cb2600 a3=25 items=0 ppid=1 pid=1589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.716000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:38:25.717551 kubelet[1589]: I0710 00:38:25.717180 1589 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:38:25.717551 kubelet[1589]: I0710 00:38:25.717237 1589 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 10 00:38:25.717551 kubelet[1589]: I0710 00:38:25.717301 1589 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:38:25.718425 kubelet[1589]: I0710 00:38:25.718410 1589 server.go:449] "Adding debug handlers to kubelet server" Jul 10 00:38:25.719463 kubelet[1589]: I0710 00:38:25.719430 1589 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:38:25.719000 audit[1602]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1602 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:25.719000 audit[1602]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffceb420a30 a2=0 a3=7ffceb420a1c items=0 ppid=1589 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.719000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:38:25.720000 audit[1603]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1603 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:25.720000 audit[1603]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4a6f3c70 a2=0 a3=7fff4a6f3c5c items=0 ppid=1589 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.720000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:38:25.723374 kubelet[1589]: E0710 00:38:25.723354 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:25.723511 kubelet[1589]: I0710 00:38:25.723491 1589 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 10 00:38:25.724329 kubelet[1589]: E0710 00:38:25.724279 1589 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.42:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.42:6443: connect: connection refused" interval="200ms" Jul 10 00:38:25.724681 kubelet[1589]: I0710 00:38:25.724486 1589 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 10 00:38:25.724872 kubelet[1589]: E0710 00:38:25.724829 1589 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:38:25.724872 kubelet[1589]: I0710 00:38:25.724658 1589 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:38:25.725186 kubelet[1589]: I0710 00:38:25.724494 1589 factory.go:221] Registration of the systemd container factory successfully Jul 10 00:38:25.725308 kubelet[1589]: I0710 00:38:25.725283 1589 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:38:25.725691 kubelet[1589]: E0710 00:38:25.723209 1589 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.42:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.42:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850bcdb705c8869 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 00:38:25.716095081 +0000 UTC m=+0.516969874,LastTimestamp:2025-07-10 00:38:25.716095081 +0000 UTC m=+0.516969874,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 00:38:25.725897 kubelet[1589]: W0710 00:38:25.725855 1589 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.42:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.42:6443: connect: connection refused Jul 10 00:38:25.726141 kubelet[1589]: E0710 00:38:25.726123 1589 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.42:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:25.725000 audit[1605]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1605 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:25.725000 audit[1605]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffe1c4eb70 a2=0 a3=7fffe1c4eb5c items=0 ppid=1589 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.725000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:38:25.726626 kubelet[1589]: I0710 00:38:25.726590 1589 factory.go:221] Registration of the containerd container factory successfully Jul 10 00:38:25.727000 audit[1607]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1607 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:25.727000 audit[1607]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff1eb0b490 a2=0 a3=7fff1eb0b47c items=0 ppid=1589 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.727000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:38:25.737124 kubelet[1589]: I0710 00:38:25.737071 1589 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 00:38:25.735000 audit[1612]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1612 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:25.735000 audit[1612]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fffba08a250 a2=0 a3=7fffba08a23c items=0 ppid=1589 pid=1612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.735000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 10 00:38:25.737000 audit[1615]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1615 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:25.737000 audit[1615]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffedc029530 a2=0 a3=7ffedc02951c items=0 ppid=1589 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.737000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:38:25.737000 audit[1616]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_chain pid=1616 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:25.737000 audit[1616]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffceb5fc690 a2=0 a3=7ffceb5fc67c items=0 ppid=1589 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.737000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:38:25.738000 audit[1617]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_chain pid=1617 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:25.738000 audit[1617]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd1998e3e0 a2=0 a3=7ffd1998e3cc items=0 ppid=1589 pid=1617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.738000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:38:25.739000 audit[1614]: NETFILTER_CFG table=mangle:34 family=10 entries=2 op=nft_register_chain pid=1614 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:25.739000 audit[1614]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe20f1b6f0 a2=0 a3=7ffe20f1b6dc items=0 ppid=1589 pid=1614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.739000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:38:25.740969 kubelet[1589]: I0710 00:38:25.740940 1589 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 00:38:25.741015 kubelet[1589]: I0710 00:38:25.740995 1589 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 10 00:38:25.741039 kubelet[1589]: I0710 00:38:25.741029 1589 kubelet.go:2321] "Starting kubelet main sync loop" Jul 10 00:38:25.741119 kubelet[1589]: E0710 00:38:25.741081 1589 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:38:25.740000 audit[1619]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1619 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:25.740000 audit[1619]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffda0dd9570 a2=0 a3=7ffda0dd955c items=0 ppid=1589 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.740000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:38:25.741965 kubelet[1589]: W0710 00:38:25.741787 1589 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.42:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.42:6443: connect: connection refused Jul 10 00:38:25.741965 kubelet[1589]: E0710 00:38:25.741835 1589 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.42:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:25.742000 audit[1621]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1621 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:25.742000 audit[1621]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffc4c9c95e0 a2=0 a3=7ffc4c9c95cc items=0 ppid=1589 pid=1621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.742000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:38:25.743759 kubelet[1589]: I0710 00:38:25.743743 1589 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 10 00:38:25.742000 audit[1622]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1622 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:25.742000 audit[1622]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd8278a520 a2=0 a3=7ffd8278a50c items=0 ppid=1589 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:25.742000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:38:25.744056 kubelet[1589]: I0710 00:38:25.743816 1589 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 10 00:38:25.744056 kubelet[1589]: I0710 00:38:25.743863 1589 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:38:25.824250 kubelet[1589]: E0710 00:38:25.824160 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:25.841561 kubelet[1589]: E0710 00:38:25.841413 1589 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:38:25.924937 kubelet[1589]: E0710 00:38:25.924881 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:25.925336 kubelet[1589]: E0710 00:38:25.925297 1589 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.42:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.42:6443: connect: connection refused" interval="400ms" Jul 10 00:38:26.025738 kubelet[1589]: E0710 00:38:26.025682 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:26.041870 kubelet[1589]: E0710 00:38:26.041805 1589 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:38:26.126551 kubelet[1589]: E0710 00:38:26.126440 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:26.197563 kubelet[1589]: I0710 00:38:26.197491 1589 policy_none.go:49] "None policy: Start" Jul 10 00:38:26.198452 kubelet[1589]: I0710 00:38:26.198437 1589 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 10 00:38:26.198539 kubelet[1589]: I0710 00:38:26.198473 1589 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:38:26.209193 systemd[1]: Created slice kubepods.slice. Jul 10 00:38:26.213576 systemd[1]: Created slice kubepods-burstable.slice. Jul 10 00:38:26.216351 systemd[1]: Created slice kubepods-besteffort.slice. Jul 10 00:38:26.227297 kubelet[1589]: E0710 00:38:26.227242 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:26.230764 kubelet[1589]: I0710 00:38:26.230740 1589 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 00:38:26.229000 audit[1589]: AVC avc: denied { mac_admin } for pid=1589 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:26.229000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:38:26.229000 audit[1589]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cb2750 a1=c0001cce10 a2=c000cb2720 a3=25 items=0 ppid=1 pid=1589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:26.229000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:38:26.231190 kubelet[1589]: I0710 00:38:26.230909 1589 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 00:38:26.231190 kubelet[1589]: I0710 00:38:26.231087 1589 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:38:26.231190 kubelet[1589]: I0710 00:38:26.231106 1589 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:38:26.231422 kubelet[1589]: I0710 00:38:26.231347 1589 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:38:26.232428 kubelet[1589]: E0710 00:38:26.232397 1589 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 10 00:38:26.326638 kubelet[1589]: E0710 00:38:26.326560 1589 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.42:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.42:6443: connect: connection refused" interval="800ms" Jul 10 00:38:26.333018 kubelet[1589]: I0710 00:38:26.332963 1589 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:38:26.333394 kubelet[1589]: E0710 00:38:26.333362 1589 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.42:6443/api/v1/nodes\": dial tcp 10.0.0.42:6443: connect: connection refused" node="localhost" Jul 10 00:38:26.449236 systemd[1]: Created slice kubepods-burstable-pod49c721af469aa8a3fba2051998440fd8.slice. Jul 10 00:38:26.465737 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 10 00:38:26.469048 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 10 00:38:26.528600 kubelet[1589]: I0710 00:38:26.528566 1589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/49c721af469aa8a3fba2051998440fd8-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"49c721af469aa8a3fba2051998440fd8\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:38:26.528697 kubelet[1589]: I0710 00:38:26.528606 1589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/49c721af469aa8a3fba2051998440fd8-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"49c721af469aa8a3fba2051998440fd8\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:38:26.528697 kubelet[1589]: I0710 00:38:26.528626 1589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:26.528697 kubelet[1589]: I0710 00:38:26.528641 1589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:26.528762 kubelet[1589]: I0710 00:38:26.528712 1589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:26.528762 kubelet[1589]: I0710 00:38:26.528732 1589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:26.528762 kubelet[1589]: I0710 00:38:26.528749 1589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:38:26.528839 kubelet[1589]: I0710 00:38:26.528765 1589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:26.528839 kubelet[1589]: I0710 00:38:26.528781 1589 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/49c721af469aa8a3fba2051998440fd8-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"49c721af469aa8a3fba2051998440fd8\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:38:26.534785 kubelet[1589]: I0710 00:38:26.534739 1589 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:38:26.535176 kubelet[1589]: E0710 00:38:26.535143 1589 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.42:6443/api/v1/nodes\": dial tcp 10.0.0.42:6443: connect: connection refused" node="localhost" Jul 10 00:38:26.549660 kubelet[1589]: W0710 00:38:26.549589 1589 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.42:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.42:6443: connect: connection refused Jul 10 00:38:26.549705 kubelet[1589]: E0710 00:38:26.549670 1589 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.42:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:26.764315 kubelet[1589]: E0710 00:38:26.764183 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:26.764959 env[1196]: time="2025-07-10T00:38:26.764922546Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:49c721af469aa8a3fba2051998440fd8,Namespace:kube-system,Attempt:0,}" Jul 10 00:38:26.768031 kubelet[1589]: E0710 00:38:26.767996 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:26.768403 env[1196]: time="2025-07-10T00:38:26.768354034Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 10 00:38:26.770524 kubelet[1589]: E0710 00:38:26.770492 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:26.770862 env[1196]: time="2025-07-10T00:38:26.770815772Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 10 00:38:26.936899 kubelet[1589]: I0710 00:38:26.936856 1589 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:38:26.937131 kubelet[1589]: E0710 00:38:26.937099 1589 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.42:6443/api/v1/nodes\": dial tcp 10.0.0.42:6443: connect: connection refused" node="localhost" Jul 10 00:38:27.062061 kubelet[1589]: W0710 00:38:27.061959 1589 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.42:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.42:6443: connect: connection refused Jul 10 00:38:27.062061 kubelet[1589]: E0710 00:38:27.062006 1589 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.42:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:27.127132 kubelet[1589]: E0710 00:38:27.127065 1589 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.42:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.42:6443: connect: connection refused" interval="1.6s" Jul 10 00:38:27.186776 kubelet[1589]: W0710 00:38:27.186696 1589 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.42:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.42:6443: connect: connection refused Jul 10 00:38:27.186953 kubelet[1589]: E0710 00:38:27.186779 1589 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.42:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:27.228165 kubelet[1589]: W0710 00:38:27.228112 1589 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.42:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.42:6443: connect: connection refused Jul 10 00:38:27.228165 kubelet[1589]: E0710 00:38:27.228162 1589 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.42:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:27.634666 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3150487661.mount: Deactivated successfully. Jul 10 00:38:27.660830 env[1196]: time="2025-07-10T00:38:27.660769449Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.665629 env[1196]: time="2025-07-10T00:38:27.665581817Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.670017 env[1196]: time="2025-07-10T00:38:27.669964289Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.673469 env[1196]: time="2025-07-10T00:38:27.673407879Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.678370 env[1196]: time="2025-07-10T00:38:27.678307912Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.679906 env[1196]: time="2025-07-10T00:38:27.679834035Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.699961 env[1196]: time="2025-07-10T00:38:27.699911412Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.704535 env[1196]: time="2025-07-10T00:38:27.704481045Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.709505 env[1196]: time="2025-07-10T00:38:27.709460066Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.710528 env[1196]: time="2025-07-10T00:38:27.710484407Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.711668 env[1196]: time="2025-07-10T00:38:27.711643702Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.717813 env[1196]: time="2025-07-10T00:38:27.717778452Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:27.738842 kubelet[1589]: I0710 00:38:27.738804 1589 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:38:27.739250 kubelet[1589]: E0710 00:38:27.739201 1589 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.42:6443/api/v1/nodes\": dial tcp 10.0.0.42:6443: connect: connection refused" node="localhost" Jul 10 00:38:27.776272 kubelet[1589]: E0710 00:38:27.776209 1589 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.42:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:27.801513 env[1196]: time="2025-07-10T00:38:27.801445327Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:38:27.801513 env[1196]: time="2025-07-10T00:38:27.801490652Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:38:27.801513 env[1196]: time="2025-07-10T00:38:27.801501532Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:38:27.801922 env[1196]: time="2025-07-10T00:38:27.801709322Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/28d41b44a13cbe3aef525aff35ddc94de5208685721ac95cbb74f3e96ad7bda3 pid=1631 runtime=io.containerd.runc.v2 Jul 10 00:38:27.927315 systemd[1]: Started cri-containerd-28d41b44a13cbe3aef525aff35ddc94de5208685721ac95cbb74f3e96ad7bda3.scope. Jul 10 00:38:27.933155 env[1196]: time="2025-07-10T00:38:27.933106342Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:38:27.933286 env[1196]: time="2025-07-10T00:38:27.933263978Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:38:27.933392 env[1196]: time="2025-07-10T00:38:27.933370077Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:38:27.933675 env[1196]: time="2025-07-10T00:38:27.933650493Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2bbc31332b1d17ca7bbda1100a06b79739eb12c8a0e69d07d1adcb99911a3555 pid=1661 runtime=io.containerd.runc.v2 Jul 10 00:38:27.942164 env[1196]: time="2025-07-10T00:38:27.941595278Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:38:27.942164 env[1196]: time="2025-07-10T00:38:27.941694845Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:38:27.942164 env[1196]: time="2025-07-10T00:38:27.941736763Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:38:27.942164 env[1196]: time="2025-07-10T00:38:27.941953971Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0e0bc0efd6708a0181a805db673f521e2db9724433bd3ecdc5836880b6be04fa pid=1668 runtime=io.containerd.runc.v2 Jul 10 00:38:27.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:27.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:27.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:27.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:27.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:27.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:27.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:27.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:27.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.019000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.019000 audit: BPF prog-id=58 op=LOAD Jul 10 00:38:28.019000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.019000 audit[1640]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1631 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238643431623434613133636265336165663532356166663335646463 Jul 10 00:38:28.019000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.019000 audit[1640]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1631 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238643431623434613133636265336165663532356166663335646463 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit: BPF prog-id=59 op=LOAD Jul 10 00:38:28.020000 audit[1640]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002cbce0 items=0 ppid=1631 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238643431623434613133636265336165663532356166663335646463 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.020000 audit: BPF prog-id=60 op=LOAD Jul 10 00:38:28.020000 audit[1640]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002cbd28 items=0 ppid=1631 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.020000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238643431623434613133636265336165663532356166663335646463 Jul 10 00:38:28.021000 audit: BPF prog-id=60 op=UNLOAD Jul 10 00:38:28.021000 audit: BPF prog-id=59 op=UNLOAD Jul 10 00:38:28.021000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.021000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.021000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.021000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.021000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.021000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.021000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.021000 audit[1640]: AVC avc: denied { perfmon } for pid=1640 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.021000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.021000 audit[1640]: AVC avc: denied { bpf } for pid=1640 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.021000 audit: BPF prog-id=61 op=LOAD Jul 10 00:38:28.021000 audit[1640]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ce138 items=0 ppid=1631 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238643431623434613133636265336165663532356166663335646463 Jul 10 00:38:28.026478 systemd[1]: Started cri-containerd-0e0bc0efd6708a0181a805db673f521e2db9724433bd3ecdc5836880b6be04fa.scope. Jul 10 00:38:28.029395 systemd[1]: Started cri-containerd-2bbc31332b1d17ca7bbda1100a06b79739eb12c8a0e69d07d1adcb99911a3555.scope. Jul 10 00:38:28.105312 env[1196]: time="2025-07-10T00:38:28.105272368Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"28d41b44a13cbe3aef525aff35ddc94de5208685721ac95cbb74f3e96ad7bda3\"" Jul 10 00:38:28.106938 kubelet[1589]: E0710 00:38:28.106674 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:28.109202 env[1196]: time="2025-07-10T00:38:28.109155082Z" level=info msg="CreateContainer within sandbox \"28d41b44a13cbe3aef525aff35ddc94de5208685721ac95cbb74f3e96ad7bda3\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 10 00:38:28.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit: BPF prog-id=62 op=LOAD Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1661 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262626333313333326231643137636137626264613131303061303662 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1661 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262626333313333326231643137636137626264613131303061303662 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit: BPF prog-id=63 op=LOAD Jul 10 00:38:28.109000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000242b90 items=0 ppid=1661 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262626333313333326231643137636137626264613131303061303662 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit: BPF prog-id=64 op=LOAD Jul 10 00:38:28.109000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000242bd8 items=0 ppid=1661 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262626333313333326231643137636137626264613131303061303662 Jul 10 00:38:28.109000 audit: BPF prog-id=64 op=UNLOAD Jul 10 00:38:28.109000 audit: BPF prog-id=63 op=UNLOAD Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.109000 audit: BPF prog-id=65 op=LOAD Jul 10 00:38:28.109000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000242fe8 items=0 ppid=1661 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.109000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262626333313333326231643137636137626264613131303061303662 Jul 10 00:38:28.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.120000 audit: BPF prog-id=66 op=LOAD Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1668 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065306263306566643637303861303138316138303564623637336635 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1668 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065306263306566643637303861303138316138303564623637336635 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.121000 audit: BPF prog-id=67 op=LOAD Jul 10 00:38:28.121000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00039b9f0 items=0 ppid=1668 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065306263306566643637303861303138316138303564623637336635 Jul 10 00:38:28.122000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.122000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.122000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.122000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.122000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.122000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.122000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.122000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.122000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.122000 audit: BPF prog-id=68 op=LOAD Jul 10 00:38:28.122000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00039ba38 items=0 ppid=1668 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065306263306566643637303861303138316138303564623637336635 Jul 10 00:38:28.123000 audit: BPF prog-id=68 op=UNLOAD Jul 10 00:38:28.123000 audit: BPF prog-id=67 op=UNLOAD Jul 10 00:38:28.123000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.123000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.123000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.123000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.123000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.123000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.123000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.123000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.123000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.123000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:28.123000 audit: BPF prog-id=69 op=LOAD Jul 10 00:38:28.123000 audit[1691]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00039be48 items=0 ppid=1668 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:28.123000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065306263306566643637303861303138316138303564623637336635 Jul 10 00:38:28.137867 env[1196]: time="2025-07-10T00:38:28.137793780Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:49c721af469aa8a3fba2051998440fd8,Namespace:kube-system,Attempt:0,} returns sandbox id \"2bbc31332b1d17ca7bbda1100a06b79739eb12c8a0e69d07d1adcb99911a3555\"" Jul 10 00:38:28.138756 kubelet[1589]: E0710 00:38:28.138572 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:28.140351 env[1196]: time="2025-07-10T00:38:28.140314549Z" level=info msg="CreateContainer within sandbox \"2bbc31332b1d17ca7bbda1100a06b79739eb12c8a0e69d07d1adcb99911a3555\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 10 00:38:28.155529 env[1196]: time="2025-07-10T00:38:28.155477176Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"0e0bc0efd6708a0181a805db673f521e2db9724433bd3ecdc5836880b6be04fa\"" Jul 10 00:38:28.156307 kubelet[1589]: E0710 00:38:28.156113 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:28.158014 env[1196]: time="2025-07-10T00:38:28.157972697Z" level=info msg="CreateContainer within sandbox \"0e0bc0efd6708a0181a805db673f521e2db9724433bd3ecdc5836880b6be04fa\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 10 00:38:28.727788 kubelet[1589]: E0710 00:38:28.727729 1589 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.42:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.42:6443: connect: connection refused" interval="3.2s" Jul 10 00:38:28.763338 kubelet[1589]: W0710 00:38:28.763277 1589 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.42:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.42:6443: connect: connection refused Jul 10 00:38:28.763338 kubelet[1589]: E0710 00:38:28.763327 1589 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.42:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:28.982091 env[1196]: time="2025-07-10T00:38:28.981946241Z" level=info msg="CreateContainer within sandbox \"28d41b44a13cbe3aef525aff35ddc94de5208685721ac95cbb74f3e96ad7bda3\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"43f0c0dd6ce07affea7e2952d16422fc3d861afd9f2e9f58ef4c414c55359196\"" Jul 10 00:38:28.982756 env[1196]: time="2025-07-10T00:38:28.982724260Z" level=info msg="StartContainer for \"43f0c0dd6ce07affea7e2952d16422fc3d861afd9f2e9f58ef4c414c55359196\"" Jul 10 00:38:28.999443 systemd[1]: Started cri-containerd-43f0c0dd6ce07affea7e2952d16422fc3d861afd9f2e9f58ef4c414c55359196.scope. Jul 10 00:38:29.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.011000 audit: BPF prog-id=70 op=LOAD Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1631 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663063306464366365303761666665613765323935326431363432 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1631 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663063306464366365303761666665613765323935326431363432 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit: BPF prog-id=71 op=LOAD Jul 10 00:38:29.012000 audit[1763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028aaa0 items=0 ppid=1631 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663063306464366365303761666665613765323935326431363432 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit: BPF prog-id=72 op=LOAD Jul 10 00:38:29.012000 audit[1763]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028aae8 items=0 ppid=1631 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663063306464366365303761666665613765323935326431363432 Jul 10 00:38:29.012000 audit: BPF prog-id=72 op=UNLOAD Jul 10 00:38:29.012000 audit: BPF prog-id=71 op=UNLOAD Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.012000 audit: BPF prog-id=73 op=LOAD Jul 10 00:38:29.012000 audit[1763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00028aef8 items=0 ppid=1631 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433663063306464366365303761666665613765323935326431363432 Jul 10 00:38:29.086371 env[1196]: time="2025-07-10T00:38:29.086314373Z" level=info msg="CreateContainer within sandbox \"2bbc31332b1d17ca7bbda1100a06b79739eb12c8a0e69d07d1adcb99911a3555\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"052a66d847c7348c0188c2f7d405a2d1c5ff65de0e9e8928f99cdd9f3c9be7e7\"" Jul 10 00:38:29.086952 env[1196]: time="2025-07-10T00:38:29.086910200Z" level=info msg="StartContainer for \"052a66d847c7348c0188c2f7d405a2d1c5ff65de0e9e8928f99cdd9f3c9be7e7\"" Jul 10 00:38:29.102033 systemd[1]: Started cri-containerd-052a66d847c7348c0188c2f7d405a2d1c5ff65de0e9e8928f99cdd9f3c9be7e7.scope. Jul 10 00:38:29.109756 kubelet[1589]: W0710 00:38:29.108563 1589 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.42:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.42:6443: connect: connection refused Jul 10 00:38:29.109756 kubelet[1589]: E0710 00:38:29.108784 1589 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.42:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.42:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:38:29.113922 env[1196]: time="2025-07-10T00:38:29.113864529Z" level=info msg="StartContainer for \"43f0c0dd6ce07affea7e2952d16422fc3d861afd9f2e9f58ef4c414c55359196\" returns successfully" Jul 10 00:38:29.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.148000 audit: BPF prog-id=74 op=LOAD Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1661 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035326136366438343763373334386330313838633266376434303561 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1661 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035326136366438343763373334386330313838633266376434303561 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit: BPF prog-id=75 op=LOAD Jul 10 00:38:29.149000 audit[1799]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c6ca0 items=0 ppid=1661 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035326136366438343763373334386330313838633266376434303561 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit: BPF prog-id=76 op=LOAD Jul 10 00:38:29.149000 audit[1799]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c6ce8 items=0 ppid=1661 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035326136366438343763373334386330313838633266376434303561 Jul 10 00:38:29.149000 audit: BPF prog-id=76 op=UNLOAD Jul 10 00:38:29.149000 audit: BPF prog-id=75 op=UNLOAD Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.149000 audit: BPF prog-id=77 op=LOAD Jul 10 00:38:29.149000 audit[1799]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c70f8 items=0 ppid=1661 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035326136366438343763373334386330313838633266376434303561 Jul 10 00:38:29.205941 env[1196]: time="2025-07-10T00:38:29.205905394Z" level=info msg="CreateContainer within sandbox \"0e0bc0efd6708a0181a805db673f521e2db9724433bd3ecdc5836880b6be04fa\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"236f330ec7711e58b098e87c4ae4f8a392833540aa205cfcd11cbe1d5bf0db78\"" Jul 10 00:38:29.206528 env[1196]: time="2025-07-10T00:38:29.206506512Z" level=info msg="StartContainer for \"236f330ec7711e58b098e87c4ae4f8a392833540aa205cfcd11cbe1d5bf0db78\"" Jul 10 00:38:29.222218 systemd[1]: Started cri-containerd-236f330ec7711e58b098e87c4ae4f8a392833540aa205cfcd11cbe1d5bf0db78.scope. Jul 10 00:38:29.234644 env[1196]: time="2025-07-10T00:38:29.233273098Z" level=info msg="StartContainer for \"052a66d847c7348c0188c2f7d405a2d1c5ff65de0e9e8928f99cdd9f3c9be7e7\" returns successfully" Jul 10 00:38:29.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit: BPF prog-id=78 op=LOAD Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1668 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233366633333065633737313165353862303938653837633461653466 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1668 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233366633333065633737313165353862303938653837633461653466 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit: BPF prog-id=79 op=LOAD Jul 10 00:38:29.316000 audit[1833]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003e2b60 items=0 ppid=1668 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233366633333065633737313165353862303938653837633461653466 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.316000 audit: BPF prog-id=80 op=LOAD Jul 10 00:38:29.316000 audit[1833]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003e2ba8 items=0 ppid=1668 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233366633333065633737313165353862303938653837633461653466 Jul 10 00:38:29.317000 audit: BPF prog-id=80 op=UNLOAD Jul 10 00:38:29.317000 audit: BPF prog-id=79 op=UNLOAD Jul 10 00:38:29.317000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.317000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.317000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.317000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.317000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.317000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.317000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.317000 audit[1833]: AVC avc: denied { perfmon } for pid=1833 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.317000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.317000 audit[1833]: AVC avc: denied { bpf } for pid=1833 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:29.317000 audit: BPF prog-id=81 op=LOAD Jul 10 00:38:29.317000 audit[1833]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003e2fb8 items=0 ppid=1668 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:29.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233366633333065633737313165353862303938653837633461653466 Jul 10 00:38:29.341511 kubelet[1589]: I0710 00:38:29.340995 1589 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:38:29.384335 env[1196]: time="2025-07-10T00:38:29.384289165Z" level=info msg="StartContainer for \"236f330ec7711e58b098e87c4ae4f8a392833540aa205cfcd11cbe1d5bf0db78\" returns successfully" Jul 10 00:38:29.787284 kubelet[1589]: E0710 00:38:29.787248 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:29.789868 kubelet[1589]: E0710 00:38:29.789813 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:29.791265 kubelet[1589]: E0710 00:38:29.791241 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:29.814884 kernel: kauditd_printk_skb: 558 callbacks suppressed Jul 10 00:38:29.815003 kernel: audit: type=1400 audit(1752107909.805:535): avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:29.815020 kernel: audit: type=1300 audit(1752107909.805:535): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0000587e0 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:38:29.805000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:29.805000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0000587e0 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:38:29.805000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:38:29.828553 kernel: audit: type=1327 audit(1752107909.805:535): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:38:29.828611 kernel: audit: type=1400 audit(1752107909.806:536): avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:29.806000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:29.806000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0005b99a0 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:38:29.834429 kernel: audit: type=1300 audit(1752107909.806:536): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0005b99a0 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:38:29.834492 kernel: audit: type=1327 audit(1752107909.806:536): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:38:29.806000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:38:30.793868 kubelet[1589]: E0710 00:38:30.793817 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:30.794310 kubelet[1589]: E0710 00:38:30.794000 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:30.794310 kubelet[1589]: E0710 00:38:30.794179 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:30.967000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:30.979907 kernel: audit: type=1400 audit(1752107910.967:537): avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:30.979996 kernel: audit: type=1300 audit(1752107910.967:537): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c007e2e040 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:38:30.967000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c007e2e040 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:38:30.967000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:38:30.985087 kernel: audit: type=1327 audit(1752107910.967:537): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:38:30.989645 kernel: audit: type=1400 audit(1752107910.967:538): avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:30.967000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:30.967000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0059fc060 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:38:30.967000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:38:30.968000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:30.968000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00399b110 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:38:30.968000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:38:30.969000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:30.969000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c007e2e140 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:38:30.969000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:38:30.969000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:30.969000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c0038aa720 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:38:30.969000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:38:30.972000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:30.972000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=63 a1=c006fa76e0 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:38:30.972000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:38:31.262640 kubelet[1589]: E0710 00:38:31.262281 1589 event.go:359] "Server rejected event (will not retry!)" err="namespaces \"default\" not found" event="&Event{ObjectMeta:{localhost.1850bcdb705c8869 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 00:38:25.716095081 +0000 UTC m=+0.516969874,LastTimestamp:2025-07-10 00:38:25.716095081 +0000 UTC m=+0.516969874,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 00:38:31.265836 kubelet[1589]: I0710 00:38:31.265798 1589 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 10 00:38:31.265836 kubelet[1589]: E0710 00:38:31.265836 1589 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 10 00:38:31.795714 kubelet[1589]: E0710 00:38:31.795690 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:31.796026 kubelet[1589]: E0710 00:38:31.795778 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:31.989750 kubelet[1589]: E0710 00:38:31.989686 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:32.090265 kubelet[1589]: E0710 00:38:32.090115 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:32.190534 kubelet[1589]: E0710 00:38:32.190459 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:32.290799 kubelet[1589]: E0710 00:38:32.290763 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:32.391451 kubelet[1589]: E0710 00:38:32.391331 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:32.491950 kubelet[1589]: E0710 00:38:32.491904 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:32.593047 kubelet[1589]: E0710 00:38:32.593001 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:32.693875 kubelet[1589]: E0710 00:38:32.693733 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:32.794192 kubelet[1589]: E0710 00:38:32.794129 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:32.895027 kubelet[1589]: E0710 00:38:32.894983 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:32.995573 kubelet[1589]: E0710 00:38:32.995504 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:33.096443 kubelet[1589]: E0710 00:38:33.096393 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:33.196592 kubelet[1589]: E0710 00:38:33.196533 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:33.297601 kubelet[1589]: E0710 00:38:33.297493 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:33.398550 kubelet[1589]: E0710 00:38:33.398484 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:33.498889 kubelet[1589]: E0710 00:38:33.498827 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:33.599516 kubelet[1589]: E0710 00:38:33.599382 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:33.700130 kubelet[1589]: E0710 00:38:33.700073 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:33.800872 kubelet[1589]: E0710 00:38:33.800802 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:33.901390 kubelet[1589]: E0710 00:38:33.901306 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:34.001938 kubelet[1589]: E0710 00:38:34.001898 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:34.102510 kubelet[1589]: E0710 00:38:34.102472 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:34.203183 kubelet[1589]: E0710 00:38:34.203094 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:34.304040 kubelet[1589]: E0710 00:38:34.304007 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:34.404522 kubelet[1589]: E0710 00:38:34.404495 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:34.505149 kubelet[1589]: E0710 00:38:34.505016 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:34.605864 kubelet[1589]: E0710 00:38:34.605815 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:34.652563 kubelet[1589]: E0710 00:38:34.652514 1589 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:34.705933 kubelet[1589]: E0710 00:38:34.705894 1589 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:35.710930 kubelet[1589]: I0710 00:38:35.710885 1589 apiserver.go:52] "Watching apiserver" Jul 10 00:38:35.725064 kubelet[1589]: I0710 00:38:35.725027 1589 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 10 00:38:36.131888 systemd[1]: Reloading. Jul 10 00:38:36.201225 /usr/lib/systemd/system-generators/torcx-generator[1892]: time="2025-07-10T00:38:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:38:36.201250 /usr/lib/systemd/system-generators/torcx-generator[1892]: time="2025-07-10T00:38:36Z" level=info msg="torcx already run" Jul 10 00:38:36.266064 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:38:36.266079 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:38:36.282277 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:38:36.360865 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 10 00:38:36.360927 kernel: audit: type=1400 audit(1752107916.348:543): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360951 kernel: audit: type=1400 audit(1752107916.348:544): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360969 kernel: audit: type=1400 audit(1752107916.348:545): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360984 kernel: audit: type=1400 audit(1752107916.348:546): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.366648 kernel: audit: type=1400 audit(1752107916.348:547): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.366786 kernel: audit: type=1400 audit(1752107916.348:548): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.366806 kernel: audit: type=1400 audit(1752107916.348:549): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.348000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.372320 kernel: audit: type=1400 audit(1752107916.348:550): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.372365 kernel: audit: type=1400 audit(1752107916.348:551): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.348000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.375028 kernel: audit: type=1400 audit(1752107916.351:552): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.351000 audit: BPF prog-id=82 op=LOAD Jul 10 00:38:36.351000 audit: BPF prog-id=74 op=UNLOAD Jul 10 00:38:36.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.357000 audit: BPF prog-id=83 op=LOAD Jul 10 00:38:36.357000 audit: BPF prog-id=66 op=UNLOAD Jul 10 00:38:36.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360000 audit: BPF prog-id=84 op=LOAD Jul 10 00:38:36.360000 audit: BPF prog-id=43 op=UNLOAD Jul 10 00:38:36.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.365000 audit: BPF prog-id=85 op=LOAD Jul 10 00:38:36.365000 audit: BPF prog-id=44 op=UNLOAD Jul 10 00:38:36.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.371000 audit: BPF prog-id=86 op=LOAD Jul 10 00:38:36.371000 audit: BPF prog-id=45 op=UNLOAD Jul 10 00:38:36.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.374000 audit: BPF prog-id=87 op=LOAD Jul 10 00:38:36.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.376000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.376000 audit: BPF prog-id=88 op=LOAD Jul 10 00:38:36.376000 audit: BPF prog-id=46 op=UNLOAD Jul 10 00:38:36.376000 audit: BPF prog-id=47 op=UNLOAD Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit: BPF prog-id=89 op=LOAD Jul 10 00:38:36.377000 audit: BPF prog-id=48 op=UNLOAD Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit: BPF prog-id=90 op=LOAD Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.377000 audit: BPF prog-id=91 op=LOAD Jul 10 00:38:36.377000 audit: BPF prog-id=49 op=UNLOAD Jul 10 00:38:36.377000 audit: BPF prog-id=50 op=UNLOAD Jul 10 00:38:36.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.378000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.378000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.378000 audit: BPF prog-id=92 op=LOAD Jul 10 00:38:36.378000 audit: BPF prog-id=70 op=UNLOAD Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit: BPF prog-id=93 op=LOAD Jul 10 00:38:36.379000 audit: BPF prog-id=51 op=UNLOAD Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.379000 audit: BPF prog-id=94 op=LOAD Jul 10 00:38:36.379000 audit: BPF prog-id=52 op=UNLOAD Jul 10 00:38:36.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.380000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.380000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.380000 audit: BPF prog-id=95 op=LOAD Jul 10 00:38:36.380000 audit: BPF prog-id=78 op=UNLOAD Jul 10 00:38:36.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.381000 audit: BPF prog-id=96 op=LOAD Jul 10 00:38:36.381000 audit: BPF prog-id=62 op=UNLOAD Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit: BPF prog-id=97 op=LOAD Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit: BPF prog-id=98 op=LOAD Jul 10 00:38:36.382000 audit: BPF prog-id=53 op=UNLOAD Jul 10 00:38:36.382000 audit: BPF prog-id=54 op=UNLOAD Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit: BPF prog-id=99 op=LOAD Jul 10 00:38:36.383000 audit: BPF prog-id=55 op=UNLOAD Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit: BPF prog-id=100 op=LOAD Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit: BPF prog-id=101 op=LOAD Jul 10 00:38:36.383000 audit: BPF prog-id=56 op=UNLOAD Jul 10 00:38:36.383000 audit: BPF prog-id=57 op=UNLOAD Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.383000 audit: BPF prog-id=102 op=LOAD Jul 10 00:38:36.383000 audit: BPF prog-id=58 op=UNLOAD Jul 10 00:38:36.394155 systemd[1]: Stopping kubelet.service... Jul 10 00:38:36.419032 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:38:36.419175 systemd[1]: Stopped kubelet.service. Jul 10 00:38:36.418000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:36.420577 systemd[1]: Starting kubelet.service... Jul 10 00:38:36.503089 systemd[1]: Started kubelet.service. Jul 10 00:38:36.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:36.544190 kubelet[1938]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:38:36.544190 kubelet[1938]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 10 00:38:36.544190 kubelet[1938]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:38:36.544190 kubelet[1938]: I0710 00:38:36.543366 1938 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:38:36.548375 kubelet[1938]: I0710 00:38:36.548347 1938 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 10 00:38:36.548375 kubelet[1938]: I0710 00:38:36.548367 1938 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:38:36.548589 kubelet[1938]: I0710 00:38:36.548571 1938 server.go:934] "Client rotation is on, will bootstrap in background" Jul 10 00:38:36.549643 kubelet[1938]: I0710 00:38:36.549620 1938 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 10 00:38:36.552327 kubelet[1938]: I0710 00:38:36.552310 1938 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:38:36.557410 kubelet[1938]: E0710 00:38:36.557384 1938 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:38:36.557410 kubelet[1938]: I0710 00:38:36.557410 1938 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:38:36.560189 kubelet[1938]: I0710 00:38:36.560175 1938 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:38:36.560337 kubelet[1938]: I0710 00:38:36.560324 1938 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 10 00:38:36.560535 kubelet[1938]: I0710 00:38:36.560509 1938 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:38:36.560875 kubelet[1938]: I0710 00:38:36.560702 1938 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:38:36.561019 kubelet[1938]: I0710 00:38:36.561004 1938 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:38:36.561088 kubelet[1938]: I0710 00:38:36.561075 1938 container_manager_linux.go:300] "Creating device plugin manager" Jul 10 00:38:36.561178 kubelet[1938]: I0710 00:38:36.561166 1938 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:38:36.561325 kubelet[1938]: I0710 00:38:36.561313 1938 kubelet.go:408] "Attempting to sync node with API server" Jul 10 00:38:36.561405 kubelet[1938]: I0710 00:38:36.561385 1938 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:38:36.561509 kubelet[1938]: I0710 00:38:36.561486 1938 kubelet.go:314] "Adding apiserver pod source" Jul 10 00:38:36.561582 kubelet[1938]: I0710 00:38:36.561568 1938 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:38:36.562143 kubelet[1938]: I0710 00:38:36.562120 1938 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:38:36.564000 audit[1938]: AVC avc: denied { mac_admin } for pid=1938 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.564000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:38:36.564000 audit[1938]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b8b710 a1=c000608a20 a2=c000b8b6e0 a3=25 items=0 ppid=1 pid=1938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:36.564000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:38:36.565000 audit[1938]: AVC avc: denied { mac_admin } for pid=1938 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.565000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:38:36.565000 audit[1938]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0000ed5e0 a1=c000608a38 a2=c000b8b7a0 a3=25 items=0 ppid=1 pid=1938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:36.565000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:38:36.568124 kubelet[1938]: I0710 00:38:36.562448 1938 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 00:38:36.568124 kubelet[1938]: I0710 00:38:36.562784 1938 server.go:1274] "Started kubelet" Jul 10 00:38:36.568124 kubelet[1938]: I0710 00:38:36.565858 1938 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:38:36.568124 kubelet[1938]: I0710 00:38:36.565886 1938 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 10 00:38:36.568124 kubelet[1938]: I0710 00:38:36.565906 1938 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:38:36.568124 kubelet[1938]: E0710 00:38:36.566313 1938 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:38:36.568124 kubelet[1938]: I0710 00:38:36.566379 1938 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:38:36.568124 kubelet[1938]: I0710 00:38:36.566439 1938 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:38:36.568124 kubelet[1938]: I0710 00:38:36.567156 1938 server.go:449] "Adding debug handlers to kubelet server" Jul 10 00:38:36.568124 kubelet[1938]: I0710 00:38:36.567804 1938 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:38:36.568124 kubelet[1938]: I0710 00:38:36.567956 1938 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:38:36.576039 kubelet[1938]: I0710 00:38:36.576011 1938 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 10 00:38:36.578094 kubelet[1938]: I0710 00:38:36.576219 1938 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 10 00:38:36.578282 kubelet[1938]: I0710 00:38:36.578270 1938 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:38:36.578353 kubelet[1938]: E0710 00:38:36.576382 1938 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:38:36.578993 kubelet[1938]: I0710 00:38:36.578962 1938 factory.go:221] Registration of the systemd container factory successfully Jul 10 00:38:36.579077 kubelet[1938]: I0710 00:38:36.579055 1938 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:38:36.580735 kubelet[1938]: I0710 00:38:36.580621 1938 factory.go:221] Registration of the containerd container factory successfully Jul 10 00:38:36.583384 kubelet[1938]: I0710 00:38:36.583355 1938 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 00:38:36.584087 kubelet[1938]: I0710 00:38:36.584070 1938 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 00:38:36.584087 kubelet[1938]: I0710 00:38:36.584088 1938 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 10 00:38:36.584150 kubelet[1938]: I0710 00:38:36.584104 1938 kubelet.go:2321] "Starting kubelet main sync loop" Jul 10 00:38:36.584150 kubelet[1938]: E0710 00:38:36.584136 1938 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:38:36.610118 kubelet[1938]: I0710 00:38:36.610073 1938 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 10 00:38:36.610118 kubelet[1938]: I0710 00:38:36.610089 1938 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 10 00:38:36.610294 kubelet[1938]: I0710 00:38:36.610137 1938 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:38:36.610339 kubelet[1938]: I0710 00:38:36.610317 1938 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 10 00:38:36.610381 kubelet[1938]: I0710 00:38:36.610334 1938 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 10 00:38:36.610381 kubelet[1938]: I0710 00:38:36.610356 1938 policy_none.go:49] "None policy: Start" Jul 10 00:38:36.611429 kubelet[1938]: I0710 00:38:36.611397 1938 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 10 00:38:36.611429 kubelet[1938]: I0710 00:38:36.611422 1938 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:38:36.611552 kubelet[1938]: I0710 00:38:36.611539 1938 state_mem.go:75] "Updated machine memory state" Jul 10 00:38:36.614881 kubelet[1938]: I0710 00:38:36.614839 1938 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 00:38:36.614000 audit[1938]: AVC avc: denied { mac_admin } for pid=1938 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:36.614000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:38:36.614000 audit[1938]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cecc90 a1=c000608888 a2=c000cecc60 a3=25 items=0 ppid=1 pid=1938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:36.614000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:38:36.615221 kubelet[1938]: I0710 00:38:36.614916 1938 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 00:38:36.615221 kubelet[1938]: I0710 00:38:36.615037 1938 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:38:36.615221 kubelet[1938]: I0710 00:38:36.615047 1938 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:38:36.615403 kubelet[1938]: I0710 00:38:36.615298 1938 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:38:36.718718 kubelet[1938]: I0710 00:38:36.718608 1938 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:38:36.726006 kubelet[1938]: I0710 00:38:36.725981 1938 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 10 00:38:36.726081 kubelet[1938]: I0710 00:38:36.726044 1938 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 10 00:38:36.779625 kubelet[1938]: I0710 00:38:36.779603 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:36.779707 kubelet[1938]: I0710 00:38:36.779629 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:36.779707 kubelet[1938]: I0710 00:38:36.779647 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:36.779707 kubelet[1938]: I0710 00:38:36.779665 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/49c721af469aa8a3fba2051998440fd8-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"49c721af469aa8a3fba2051998440fd8\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:38:36.779707 kubelet[1938]: I0710 00:38:36.779678 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/49c721af469aa8a3fba2051998440fd8-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"49c721af469aa8a3fba2051998440fd8\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:38:36.779707 kubelet[1938]: I0710 00:38:36.779691 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/49c721af469aa8a3fba2051998440fd8-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"49c721af469aa8a3fba2051998440fd8\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:38:36.779829 kubelet[1938]: I0710 00:38:36.779728 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:36.779829 kubelet[1938]: I0710 00:38:36.779744 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:36.779829 kubelet[1938]: I0710 00:38:36.779759 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:38:36.993693 kubelet[1938]: E0710 00:38:36.993581 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:36.993693 kubelet[1938]: E0710 00:38:36.993591 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:36.993693 kubelet[1938]: E0710 00:38:36.993592 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:37.562860 kubelet[1938]: I0710 00:38:37.562803 1938 apiserver.go:52] "Watching apiserver" Jul 10 00:38:37.579318 kubelet[1938]: I0710 00:38:37.579278 1938 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 10 00:38:37.596582 kubelet[1938]: E0710 00:38:37.595290 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:37.603761 kubelet[1938]: E0710 00:38:37.603715 1938 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:38:37.604008 kubelet[1938]: E0710 00:38:37.603974 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:37.604125 kubelet[1938]: E0710 00:38:37.604095 1938 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 10 00:38:37.604242 kubelet[1938]: E0710 00:38:37.604211 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:37.620382 kubelet[1938]: I0710 00:38:37.620316 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.6202639269999999 podStartE2EDuration="1.620263927s" podCreationTimestamp="2025-07-10 00:38:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:38:37.619998337 +0000 UTC m=+1.113624644" watchObservedRunningTime="2025-07-10 00:38:37.620263927 +0000 UTC m=+1.113890203" Jul 10 00:38:37.628317 kubelet[1938]: I0710 00:38:37.628253 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.628231114 podStartE2EDuration="1.628231114s" podCreationTimestamp="2025-07-10 00:38:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:38:37.628086567 +0000 UTC m=+1.121712843" watchObservedRunningTime="2025-07-10 00:38:37.628231114 +0000 UTC m=+1.121857390" Jul 10 00:38:37.635256 kubelet[1938]: I0710 00:38:37.635213 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.635197011 podStartE2EDuration="1.635197011s" podCreationTimestamp="2025-07-10 00:38:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:38:37.634981628 +0000 UTC m=+1.128607904" watchObservedRunningTime="2025-07-10 00:38:37.635197011 +0000 UTC m=+1.128823287" Jul 10 00:38:38.253000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7297 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 00:38:38.253000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000afed80 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:38:38.253000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:38:38.596642 kubelet[1938]: E0710 00:38:38.596504 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:38.597060 kubelet[1938]: E0710 00:38:38.596721 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:39.617471 kubelet[1938]: E0710 00:38:39.617419 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:40.350000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:40.350000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000439aa0 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:38:40.350000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:38:40.350000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:40.350000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0005b8e80 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:38:40.350000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:38:40.351000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:40.351000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0000ab5e0 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:38:40.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:38:40.351000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:38:40.351000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0005b91c0 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:38:40.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:38:40.600193 kubelet[1938]: E0710 00:38:40.600146 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:42.766745 kubelet[1938]: I0710 00:38:42.766696 1938 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 10 00:38:42.767132 env[1196]: time="2025-07-10T00:38:42.767066889Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 10 00:38:42.767298 kubelet[1938]: I0710 00:38:42.767241 1938 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 10 00:38:43.626603 systemd[1]: Created slice kubepods-besteffort-podfff113d9_bf8e_449b_bef6_e8579078a865.slice. Jul 10 00:38:43.726201 kubelet[1938]: I0710 00:38:43.726152 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/fff113d9-bf8e-449b-bef6-e8579078a865-xtables-lock\") pod \"kube-proxy-wspkc\" (UID: \"fff113d9-bf8e-449b-bef6-e8579078a865\") " pod="kube-system/kube-proxy-wspkc" Jul 10 00:38:43.726201 kubelet[1938]: I0710 00:38:43.726198 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/fff113d9-bf8e-449b-bef6-e8579078a865-lib-modules\") pod \"kube-proxy-wspkc\" (UID: \"fff113d9-bf8e-449b-bef6-e8579078a865\") " pod="kube-system/kube-proxy-wspkc" Jul 10 00:38:43.726384 kubelet[1938]: I0710 00:38:43.726221 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gkc2c\" (UniqueName: \"kubernetes.io/projected/fff113d9-bf8e-449b-bef6-e8579078a865-kube-api-access-gkc2c\") pod \"kube-proxy-wspkc\" (UID: \"fff113d9-bf8e-449b-bef6-e8579078a865\") " pod="kube-system/kube-proxy-wspkc" Jul 10 00:38:43.726384 kubelet[1938]: I0710 00:38:43.726248 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/fff113d9-bf8e-449b-bef6-e8579078a865-kube-proxy\") pod \"kube-proxy-wspkc\" (UID: \"fff113d9-bf8e-449b-bef6-e8579078a865\") " pod="kube-system/kube-proxy-wspkc" Jul 10 00:38:43.831200 kubelet[1938]: I0710 00:38:43.831167 1938 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 10 00:38:43.931280 systemd[1]: Created slice kubepods-besteffort-pode98985e6_b5f3_4ad0_a794_cde70fcbd2d8.slice. Jul 10 00:38:43.931839 kubelet[1938]: E0710 00:38:43.931805 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:43.932549 env[1196]: time="2025-07-10T00:38:43.932502221Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-wspkc,Uid:fff113d9-bf8e-449b-bef6-e8579078a865,Namespace:kube-system,Attempt:0,}" Jul 10 00:38:43.960872 env[1196]: time="2025-07-10T00:38:43.960780930Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:38:43.961056 env[1196]: time="2025-07-10T00:38:43.960826496Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:38:43.961056 env[1196]: time="2025-07-10T00:38:43.960856233Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:38:43.961159 env[1196]: time="2025-07-10T00:38:43.961046395Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/077ee4d1d5d2509aa6fced8b728b42fb89907527e31e338c50eb585b26a9d3a6 pid=1993 runtime=io.containerd.runc.v2 Jul 10 00:38:44.028777 kubelet[1938]: I0710 00:38:44.028716 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/e98985e6-b5f3-4ad0-a794-cde70fcbd2d8-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-sgh4w\" (UID: \"e98985e6-b5f3-4ad0-a794-cde70fcbd2d8\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-sgh4w" Jul 10 00:38:44.028777 kubelet[1938]: I0710 00:38:44.028775 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5xh59\" (UniqueName: \"kubernetes.io/projected/e98985e6-b5f3-4ad0-a794-cde70fcbd2d8-kube-api-access-5xh59\") pod \"tigera-operator-5bf8dfcb4-sgh4w\" (UID: \"e98985e6-b5f3-4ad0-a794-cde70fcbd2d8\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-sgh4w" Jul 10 00:38:44.040031 systemd[1]: Started cri-containerd-077ee4d1d5d2509aa6fced8b728b42fb89907527e31e338c50eb585b26a9d3a6.scope. Jul 10 00:38:44.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.054401 kernel: kauditd_printk_skb: 269 callbacks suppressed Jul 10 00:38:44.054456 kernel: audit: type=1400 audit(1752107924.049:794): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.054477 kernel: audit: type=1400 audit(1752107924.049:795): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.059831 kernel: audit: type=1400 audit(1752107924.049:796): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.059895 kernel: audit: type=1400 audit(1752107924.049:797): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.065379 kernel: audit: type=1400 audit(1752107924.049:798): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.065419 kernel: audit: type=1400 audit(1752107924.049:799): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.070910 kernel: audit: type=1400 audit(1752107924.049:800): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.070950 kernel: audit: type=1400 audit(1752107924.049:801): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.076394 kernel: audit: type=1400 audit(1752107924.049:802): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.076475 kernel: audit: type=1400 audit(1752107924.053:803): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit: BPF prog-id=103 op=LOAD Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1993 pid=2002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037376565346431643564323530396161366663656438623732386234 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1993 pid=2002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037376565346431643564323530396161366663656438623732386234 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.053000 audit: BPF prog-id=104 op=LOAD Jul 10 00:38:44.053000 audit[2002]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002cdce0 items=0 ppid=1993 pid=2002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037376565346431643564323530396161366663656438623732386234 Jul 10 00:38:44.056000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.056000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.056000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.056000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.056000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.056000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.056000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.056000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.056000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.056000 audit: BPF prog-id=105 op=LOAD Jul 10 00:38:44.056000 audit[2002]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002cdd28 items=0 ppid=1993 pid=2002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037376565346431643564323530396161366663656438623732386234 Jul 10 00:38:44.058000 audit: BPF prog-id=105 op=UNLOAD Jul 10 00:38:44.058000 audit: BPF prog-id=104 op=UNLOAD Jul 10 00:38:44.058000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.058000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.058000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.058000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.058000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.058000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.058000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.058000 audit[2002]: AVC avc: denied { perfmon } for pid=2002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.058000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.058000 audit[2002]: AVC avc: denied { bpf } for pid=2002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.058000 audit: BPF prog-id=106 op=LOAD Jul 10 00:38:44.058000 audit[2002]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b6138 items=0 ppid=1993 pid=2002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037376565346431643564323530396161366663656438623732386234 Jul 10 00:38:44.085897 env[1196]: time="2025-07-10T00:38:44.085855241Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-wspkc,Uid:fff113d9-bf8e-449b-bef6-e8579078a865,Namespace:kube-system,Attempt:0,} returns sandbox id \"077ee4d1d5d2509aa6fced8b728b42fb89907527e31e338c50eb585b26a9d3a6\"" Jul 10 00:38:44.087201 kubelet[1938]: E0710 00:38:44.087180 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:44.088774 env[1196]: time="2025-07-10T00:38:44.088738736Z" level=info msg="CreateContainer within sandbox \"077ee4d1d5d2509aa6fced8b728b42fb89907527e31e338c50eb585b26a9d3a6\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 10 00:38:44.104497 env[1196]: time="2025-07-10T00:38:44.104446950Z" level=info msg="CreateContainer within sandbox \"077ee4d1d5d2509aa6fced8b728b42fb89907527e31e338c50eb585b26a9d3a6\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"ace205364ca796230c1d6a386891ad8434cf7e20cd3c3ccf1baff7a36170c41e\"" Jul 10 00:38:44.105017 env[1196]: time="2025-07-10T00:38:44.104968502Z" level=info msg="StartContainer for \"ace205364ca796230c1d6a386891ad8434cf7e20cd3c3ccf1baff7a36170c41e\"" Jul 10 00:38:44.118620 systemd[1]: Started cri-containerd-ace205364ca796230c1d6a386891ad8434cf7e20cd3c3ccf1baff7a36170c41e.scope. Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb546705cc8 items=0 ppid=1993 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163653230353336346361373936323330633164366133383638393161 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit: BPF prog-id=107 op=LOAD Jul 10 00:38:44.130000 audit[2035]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00028cda8 items=0 ppid=1993 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163653230353336346361373936323330633164366133383638393161 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit: BPF prog-id=108 op=LOAD Jul 10 00:38:44.130000 audit[2035]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00028cdf8 items=0 ppid=1993 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163653230353336346361373936323330633164366133383638393161 Jul 10 00:38:44.130000 audit: BPF prog-id=108 op=UNLOAD Jul 10 00:38:44.130000 audit: BPF prog-id=107 op=UNLOAD Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { perfmon } for pid=2035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit[2035]: AVC avc: denied { bpf } for pid=2035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.130000 audit: BPF prog-id=109 op=LOAD Jul 10 00:38:44.130000 audit[2035]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00028ce88 items=0 ppid=1993 pid=2035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163653230353336346361373936323330633164366133383638393161 Jul 10 00:38:44.144882 env[1196]: time="2025-07-10T00:38:44.144831490Z" level=info msg="StartContainer for \"ace205364ca796230c1d6a386891ad8434cf7e20cd3c3ccf1baff7a36170c41e\" returns successfully" Jul 10 00:38:44.231000 audit[2098]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2098 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.231000 audit[2098]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe57e0ecb0 a2=0 a3=7ffe57e0ec9c items=0 ppid=2046 pid=2098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.231000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:38:44.232000 audit[2099]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2099 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.232000 audit[2099]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeee6c9580 a2=0 a3=7ffeee6c956c items=0 ppid=2046 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.232000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:38:44.235580 env[1196]: time="2025-07-10T00:38:44.235531813Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-sgh4w,Uid:e98985e6-b5f3-4ad0-a794-cde70fcbd2d8,Namespace:tigera-operator,Attempt:0,}" Jul 10 00:38:44.234000 audit[2100]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2100 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.234000 audit[2100]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc5ff8c980 a2=0 a3=7ffc5ff8c96c items=0 ppid=2046 pid=2100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.234000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:38:44.234000 audit[2101]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2101 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.234000 audit[2101]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcb188aa00 a2=0 a3=7ffcb188a9ec items=0 ppid=2046 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.234000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:38:44.237000 audit[2102]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2102 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.237000 audit[2102]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdd4d8d1f0 a2=0 a3=7ffdd4d8d1dc items=0 ppid=2046 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.237000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:38:44.237000 audit[2103]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2103 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.237000 audit[2103]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd59e30370 a2=0 a3=7ffd59e3035c items=0 ppid=2046 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.237000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:38:44.254507 env[1196]: time="2025-07-10T00:38:44.254450004Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:38:44.254507 env[1196]: time="2025-07-10T00:38:44.254483267Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:38:44.254507 env[1196]: time="2025-07-10T00:38:44.254494889Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:38:44.254722 env[1196]: time="2025-07-10T00:38:44.254601983Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/92350d344b50ad17551ff298bd5c69c18b6b86212538bfb3a1c21eea525ba149 pid=2111 runtime=io.containerd.runc.v2 Jul 10 00:38:44.264427 systemd[1]: Started cri-containerd-92350d344b50ad17551ff298bd5c69c18b6b86212538bfb3a1c21eea525ba149.scope. Jul 10 00:38:44.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit: BPF prog-id=110 op=LOAD Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2111 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932333530643334346235306164313735353166663239386264356336 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2111 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932333530643334346235306164313735353166663239386264356336 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit: BPF prog-id=111 op=LOAD Jul 10 00:38:44.273000 audit[2121]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000292970 items=0 ppid=2111 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932333530643334346235306164313735353166663239386264356336 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit: BPF prog-id=112 op=LOAD Jul 10 00:38:44.273000 audit[2121]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002929b8 items=0 ppid=2111 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932333530643334346235306164313735353166663239386264356336 Jul 10 00:38:44.273000 audit: BPF prog-id=112 op=UNLOAD Jul 10 00:38:44.273000 audit: BPF prog-id=111 op=UNLOAD Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { perfmon } for pid=2121 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit[2121]: AVC avc: denied { bpf } for pid=2121 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:44.273000 audit: BPF prog-id=113 op=LOAD Jul 10 00:38:44.273000 audit[2121]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000292dc8 items=0 ppid=2111 pid=2121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932333530643334346235306164313735353166663239386264356336 Jul 10 00:38:44.303286 env[1196]: time="2025-07-10T00:38:44.303201210Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-sgh4w,Uid:e98985e6-b5f3-4ad0-a794-cde70fcbd2d8,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"92350d344b50ad17551ff298bd5c69c18b6b86212538bfb3a1c21eea525ba149\"" Jul 10 00:38:44.304877 env[1196]: time="2025-07-10T00:38:44.304635860Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 10 00:38:44.333000 audit[2146]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.333000 audit[2146]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc8f475740 a2=0 a3=7ffc8f47572c items=0 ppid=2046 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.333000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:38:44.335000 audit[2148]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2148 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.335000 audit[2148]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc48a99ec0 a2=0 a3=7ffc48a99eac items=0 ppid=2046 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 10 00:38:44.338000 audit[2151]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2151 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.338000 audit[2151]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff28ae2b30 a2=0 a3=7fff28ae2b1c items=0 ppid=2046 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.338000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 10 00:38:44.339000 audit[2152]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.339000 audit[2152]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9a0f2dd0 a2=0 a3=7ffd9a0f2dbc items=0 ppid=2046 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.339000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:38:44.341000 audit[2154]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.341000 audit[2154]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd601c36d0 a2=0 a3=7ffd601c36bc items=0 ppid=2046 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.341000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:38:44.342000 audit[2155]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.342000 audit[2155]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc2ce2ade0 a2=0 a3=7ffc2ce2adcc items=0 ppid=2046 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.342000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:38:44.344000 audit[2157]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2157 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.344000 audit[2157]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe09d707d0 a2=0 a3=7ffe09d707bc items=0 ppid=2046 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.344000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:38:44.346000 audit[2160]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.346000 audit[2160]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd78a751b0 a2=0 a3=7ffd78a7519c items=0 ppid=2046 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.346000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 10 00:38:44.347000 audit[2161]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.347000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc29c1e570 a2=0 a3=7ffc29c1e55c items=0 ppid=2046 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.347000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:38:44.349000 audit[2163]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.349000 audit[2163]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffedae315c0 a2=0 a3=7ffedae315ac items=0 ppid=2046 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.349000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:38:44.350000 audit[2164]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.350000 audit[2164]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffa5d9a1d0 a2=0 a3=7fffa5d9a1bc items=0 ppid=2046 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.350000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:38:44.352000 audit[2166]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.352000 audit[2166]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffea6d93830 a2=0 a3=7ffea6d9381c items=0 ppid=2046 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.352000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:38:44.355000 audit[2169]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.355000 audit[2169]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffa3ef8ff0 a2=0 a3=7fffa3ef8fdc items=0 ppid=2046 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.355000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:38:44.358000 audit[2172]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.358000 audit[2172]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd28e9eb50 a2=0 a3=7ffd28e9eb3c items=0 ppid=2046 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.358000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:38:44.359000 audit[2173]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.359000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe7a698ee0 a2=0 a3=7ffe7a698ecc items=0 ppid=2046 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.359000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:38:44.361000 audit[2175]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.361000 audit[2175]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffdf7ffa5e0 a2=0 a3=7ffdf7ffa5cc items=0 ppid=2046 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.361000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:38:44.364000 audit[2178]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.364000 audit[2178]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff8d399420 a2=0 a3=7fff8d39940c items=0 ppid=2046 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.364000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:38:44.365000 audit[2179]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.365000 audit[2179]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe721b78f0 a2=0 a3=7ffe721b78dc items=0 ppid=2046 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.365000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:38:44.366000 audit[2181]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:38:44.366000 audit[2181]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fffbb0234b0 a2=0 a3=7fffbb02349c items=0 ppid=2046 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.366000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:38:44.385000 audit[2187]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:44.385000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe239a2a80 a2=0 a3=7ffe239a2a6c items=0 ppid=2046 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.385000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:44.394000 audit[2187]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:44.394000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffe239a2a80 a2=0 a3=7ffe239a2a6c items=0 ppid=2046 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.394000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:44.395000 audit[2192]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2192 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.395000 audit[2192]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc27a0ee20 a2=0 a3=7ffc27a0ee0c items=0 ppid=2046 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:38:44.397000 audit[2194]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.397000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffc9bcc4760 a2=0 a3=7ffc9bcc474c items=0 ppid=2046 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.397000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 10 00:38:44.400000 audit[2197]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2197 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.400000 audit[2197]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffca91fb990 a2=0 a3=7ffca91fb97c items=0 ppid=2046 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.400000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 10 00:38:44.401000 audit[2198]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2198 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.401000 audit[2198]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff9b7fcad0 a2=0 a3=7fff9b7fcabc items=0 ppid=2046 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.401000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:38:44.403000 audit[2200]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2200 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.403000 audit[2200]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc1389a8a0 a2=0 a3=7ffc1389a88c items=0 ppid=2046 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.403000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:38:44.403000 audit[2201]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.403000 audit[2201]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf790b700 a2=0 a3=7ffdf790b6ec items=0 ppid=2046 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.403000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:38:44.405000 audit[2203]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2203 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.405000 audit[2203]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcb5ba0fb0 a2=0 a3=7ffcb5ba0f9c items=0 ppid=2046 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.405000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 10 00:38:44.408000 audit[2206]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.408000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd4be2dc20 a2=0 a3=7ffd4be2dc0c items=0 ppid=2046 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.408000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:38:44.409000 audit[2207]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2207 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.409000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc86d7f700 a2=0 a3=7ffc86d7f6ec items=0 ppid=2046 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:38:44.411000 audit[2209]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2209 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.411000 audit[2209]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffffc5d2270 a2=0 a3=7ffffc5d225c items=0 ppid=2046 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.411000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:38:44.412000 audit[2210]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.412000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd00adec0 a2=0 a3=7fffd00adeac items=0 ppid=2046 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.412000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:38:44.414000 audit[2212]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.414000 audit[2212]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffb1bd5460 a2=0 a3=7fffb1bd544c items=0 ppid=2046 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.414000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:38:44.417000 audit[2215]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.417000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe27e0f1a0 a2=0 a3=7ffe27e0f18c items=0 ppid=2046 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.417000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:38:44.420000 audit[2218]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2218 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.420000 audit[2218]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdbd3e6790 a2=0 a3=7ffdbd3e677c items=0 ppid=2046 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 10 00:38:44.420000 audit[2219]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.420000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffc633c250 a2=0 a3=7fffc633c23c items=0 ppid=2046 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.420000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:38:44.422000 audit[2221]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.422000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc78e695d0 a2=0 a3=7ffc78e695bc items=0 ppid=2046 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.422000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:38:44.425000 audit[2224]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.425000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffc53aaa8c0 a2=0 a3=7ffc53aaa8ac items=0 ppid=2046 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.425000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:38:44.426000 audit[2225]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.426000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff9c844a90 a2=0 a3=7fff9c844a7c items=0 ppid=2046 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.426000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:38:44.428000 audit[2227]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.428000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe83913170 a2=0 a3=7ffe8391315c items=0 ppid=2046 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.428000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:38:44.429000 audit[2228]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.429000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2e8e4980 a2=0 a3=7ffe2e8e496c items=0 ppid=2046 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.429000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:38:44.431000 audit[2230]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.431000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffda53f4db0 a2=0 a3=7ffda53f4d9c items=0 ppid=2046 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.431000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:38:44.433000 audit[2233]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:38:44.433000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd71ea9730 a2=0 a3=7ffd71ea971c items=0 ppid=2046 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:38:44.436000 audit[2235]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:38:44.436000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffdfaeb9bf0 a2=0 a3=7ffdfaeb9bdc items=0 ppid=2046 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.436000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:44.436000 audit[2235]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:38:44.436000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffdfaeb9bf0 a2=0 a3=7ffdfaeb9bdc items=0 ppid=2046 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:44.436000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:44.466619 kubelet[1938]: E0710 00:38:44.466583 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:44.608912 kubelet[1938]: E0710 00:38:44.608880 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:44.608912 kubelet[1938]: E0710 00:38:44.608896 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:45.715620 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount537138074.mount: Deactivated successfully. Jul 10 00:38:45.762002 kubelet[1938]: E0710 00:38:45.761952 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:45.774692 kubelet[1938]: I0710 00:38:45.774624 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-wspkc" podStartSLOduration=2.774598287 podStartE2EDuration="2.774598287s" podCreationTimestamp="2025-07-10 00:38:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:38:44.625820789 +0000 UTC m=+8.119447065" watchObservedRunningTime="2025-07-10 00:38:45.774598287 +0000 UTC m=+9.268224563" Jul 10 00:38:45.947956 update_engine[1188]: I0710 00:38:45.947906 1188 update_attempter.cc:509] Updating boot flags... Jul 10 00:38:46.521387 env[1196]: time="2025-07-10T00:38:46.521324523Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:46.523391 env[1196]: time="2025-07-10T00:38:46.523363095Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:46.525237 env[1196]: time="2025-07-10T00:38:46.525190225Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:46.526627 env[1196]: time="2025-07-10T00:38:46.526575166Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:46.527174 env[1196]: time="2025-07-10T00:38:46.527132865Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 10 00:38:46.528959 env[1196]: time="2025-07-10T00:38:46.528931089Z" level=info msg="CreateContainer within sandbox \"92350d344b50ad17551ff298bd5c69c18b6b86212538bfb3a1c21eea525ba149\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 10 00:38:46.539954 env[1196]: time="2025-07-10T00:38:46.539912637Z" level=info msg="CreateContainer within sandbox \"92350d344b50ad17551ff298bd5c69c18b6b86212538bfb3a1c21eea525ba149\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"8fb25023007c77600930d889381b7311ca2e601da2c1d15893be5b9556015ee3\"" Jul 10 00:38:46.540404 env[1196]: time="2025-07-10T00:38:46.540379202Z" level=info msg="StartContainer for \"8fb25023007c77600930d889381b7311ca2e601da2c1d15893be5b9556015ee3\"" Jul 10 00:38:46.563252 systemd[1]: Started cri-containerd-8fb25023007c77600930d889381b7311ca2e601da2c1d15893be5b9556015ee3.scope. Jul 10 00:38:46.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit: BPF prog-id=114 op=LOAD Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2111 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:46.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866623235303233303037633737363030393330643838393338316237 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2111 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:46.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866623235303233303037633737363030393330643838393338316237 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.572000 audit: BPF prog-id=115 op=LOAD Jul 10 00:38:46.572000 audit[2257]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000234ac0 items=0 ppid=2111 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:46.572000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866623235303233303037633737363030393330643838393338316237 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit: BPF prog-id=116 op=LOAD Jul 10 00:38:46.573000 audit[2257]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000234b08 items=0 ppid=2111 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:46.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866623235303233303037633737363030393330643838393338316237 Jul 10 00:38:46.573000 audit: BPF prog-id=116 op=UNLOAD Jul 10 00:38:46.573000 audit: BPF prog-id=115 op=UNLOAD Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:46.573000 audit: BPF prog-id=117 op=LOAD Jul 10 00:38:46.573000 audit[2257]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000234f18 items=0 ppid=2111 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:46.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866623235303233303037633737363030393330643838393338316237 Jul 10 00:38:46.593175 env[1196]: time="2025-07-10T00:38:46.593118568Z" level=info msg="StartContainer for \"8fb25023007c77600930d889381b7311ca2e601da2c1d15893be5b9556015ee3\" returns successfully" Jul 10 00:38:46.615296 kubelet[1938]: E0710 00:38:46.614497 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:46.628649 kubelet[1938]: I0710 00:38:46.628576 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-sgh4w" podStartSLOduration=1.404606758 podStartE2EDuration="3.628556955s" podCreationTimestamp="2025-07-10 00:38:43 +0000 UTC" firstStartedPulling="2025-07-10 00:38:44.303968971 +0000 UTC m=+7.797595247" lastFinishedPulling="2025-07-10 00:38:46.527919168 +0000 UTC m=+10.021545444" observedRunningTime="2025-07-10 00:38:46.628354691 +0000 UTC m=+10.121980967" watchObservedRunningTime="2025-07-10 00:38:46.628556955 +0000 UTC m=+10.122183241" Jul 10 00:38:47.536865 systemd[1]: run-containerd-runc-k8s.io-8fb25023007c77600930d889381b7311ca2e601da2c1d15893be5b9556015ee3-runc.UsID3j.mount: Deactivated successfully. Jul 10 00:38:52.894908 sudo[1337]: pam_unix(sudo:session): session closed for user root Jul 10 00:38:52.894000 audit[1337]: USER_END pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:52.895989 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 10 00:38:52.896055 kernel: audit: type=1106 audit(1752107932.894:905): pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:52.897069 sshd[1334]: pam_unix(sshd:session): session closed for user core Jul 10 00:38:52.894000 audit[1337]: CRED_DISP pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:52.899305 systemd[1]: sshd@6-10.0.0.42:22-10.0.0.1:33552.service: Deactivated successfully. Jul 10 00:38:52.899905 systemd[1]: session-7.scope: Deactivated successfully. Jul 10 00:38:52.900009 systemd[1]: session-7.scope: Consumed 4.891s CPU time. Jul 10 00:38:52.900632 systemd-logind[1186]: Session 7 logged out. Waiting for processes to exit. Jul 10 00:38:52.901426 systemd-logind[1186]: Removed session 7. Jul 10 00:38:52.902895 kernel: audit: type=1104 audit(1752107932.894:906): pid=1337 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:38:52.902951 kernel: audit: type=1106 audit(1752107932.895:907): pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:52.895000 audit[1334]: USER_END pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:52.895000 audit[1334]: CRED_DISP pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:52.910623 kernel: audit: type=1104 audit(1752107932.895:908): pid=1334 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:38:52.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.42:22-10.0.0.1:33552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:52.914959 kernel: audit: type=1131 audit(1752107932.895:909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.42:22-10.0.0.1:33552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:38:53.370000 audit[2341]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:53.370000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdb4cd87d0 a2=0 a3=7ffdb4cd87bc items=0 ppid=2046 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:53.379049 kernel: audit: type=1325 audit(1752107933.370:910): table=filter:89 family=2 entries=14 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:53.379179 kernel: audit: type=1300 audit(1752107933.370:910): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdb4cd87d0 a2=0 a3=7ffdb4cd87bc items=0 ppid=2046 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:53.379216 kernel: audit: type=1327 audit(1752107933.370:910): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:53.370000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:53.381000 audit[2341]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:53.384899 kernel: audit: type=1325 audit(1752107933.381:911): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:53.381000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdb4cd87d0 a2=0 a3=0 items=0 ppid=2046 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:53.393875 kernel: audit: type=1300 audit(1752107933.381:911): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdb4cd87d0 a2=0 a3=0 items=0 ppid=2046 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:53.381000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:53.394000 audit[2343]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:53.394000 audit[2343]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fffcc664850 a2=0 a3=7fffcc66483c items=0 ppid=2046 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:53.394000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:53.398000 audit[2343]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:53.398000 audit[2343]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffcc664850 a2=0 a3=0 items=0 ppid=2046 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:53.398000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:55.361000 audit[2346]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2346 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:55.361000 audit[2346]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffb184cab0 a2=0 a3=7fffb184ca9c items=0 ppid=2046 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:55.361000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:55.367000 audit[2346]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2346 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:55.367000 audit[2346]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffb184cab0 a2=0 a3=0 items=0 ppid=2046 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:55.367000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:55.384000 audit[2348]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:55.384000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff26690460 a2=0 a3=7fff2669044c items=0 ppid=2046 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:55.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:55.390000 audit[2348]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:55.390000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff26690460 a2=0 a3=0 items=0 ppid=2046 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:55.390000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:56.364000 audit[2350]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:56.364000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffc461e9510 a2=0 a3=7ffc461e94fc items=0 ppid=2046 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:56.364000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:56.370000 audit[2350]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:56.380134 systemd[1]: Created slice kubepods-besteffort-pod991b5c47_54fa_4d3b_9b97_8ba3e787b955.slice. Jul 10 00:38:56.370000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc461e9510 a2=0 a3=0 items=0 ppid=2046 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:56.370000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:56.413915 kubelet[1938]: I0710 00:38:56.413837 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/991b5c47-54fa-4d3b-9b97-8ba3e787b955-typha-certs\") pod \"calico-typha-745c448964-ng4jm\" (UID: \"991b5c47-54fa-4d3b-9b97-8ba3e787b955\") " pod="calico-system/calico-typha-745c448964-ng4jm" Jul 10 00:38:56.413915 kubelet[1938]: I0710 00:38:56.413919 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/991b5c47-54fa-4d3b-9b97-8ba3e787b955-tigera-ca-bundle\") pod \"calico-typha-745c448964-ng4jm\" (UID: \"991b5c47-54fa-4d3b-9b97-8ba3e787b955\") " pod="calico-system/calico-typha-745c448964-ng4jm" Jul 10 00:38:56.414373 kubelet[1938]: I0710 00:38:56.413947 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qxrxh\" (UniqueName: \"kubernetes.io/projected/991b5c47-54fa-4d3b-9b97-8ba3e787b955-kube-api-access-qxrxh\") pod \"calico-typha-745c448964-ng4jm\" (UID: \"991b5c47-54fa-4d3b-9b97-8ba3e787b955\") " pod="calico-system/calico-typha-745c448964-ng4jm" Jul 10 00:38:56.444422 systemd[1]: Created slice kubepods-besteffort-podb6df9072_87ae_40e6_8d0f_b2a2492c171b.slice. Jul 10 00:38:56.514494 kubelet[1938]: I0710 00:38:56.514437 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/b6df9072-87ae-40e6-8d0f-b2a2492c171b-cni-net-dir\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514494 kubelet[1938]: I0710 00:38:56.514494 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b6df9072-87ae-40e6-8d0f-b2a2492c171b-xtables-lock\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514731 kubelet[1938]: I0710 00:38:56.514574 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/b6df9072-87ae-40e6-8d0f-b2a2492c171b-policysync\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514731 kubelet[1938]: I0710 00:38:56.514623 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b6df9072-87ae-40e6-8d0f-b2a2492c171b-tigera-ca-bundle\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514731 kubelet[1938]: I0710 00:38:56.514645 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vhlxg\" (UniqueName: \"kubernetes.io/projected/b6df9072-87ae-40e6-8d0f-b2a2492c171b-kube-api-access-vhlxg\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514731 kubelet[1938]: I0710 00:38:56.514698 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/b6df9072-87ae-40e6-8d0f-b2a2492c171b-cni-log-dir\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514731 kubelet[1938]: I0710 00:38:56.514717 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b6df9072-87ae-40e6-8d0f-b2a2492c171b-var-lib-calico\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514920 kubelet[1938]: I0710 00:38:56.514734 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/b6df9072-87ae-40e6-8d0f-b2a2492c171b-var-run-calico\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514920 kubelet[1938]: I0710 00:38:56.514795 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/b6df9072-87ae-40e6-8d0f-b2a2492c171b-cni-bin-dir\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514920 kubelet[1938]: I0710 00:38:56.514819 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/b6df9072-87ae-40e6-8d0f-b2a2492c171b-flexvol-driver-host\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514920 kubelet[1938]: I0710 00:38:56.514840 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b6df9072-87ae-40e6-8d0f-b2a2492c171b-lib-modules\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.514920 kubelet[1938]: I0710 00:38:56.514868 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/b6df9072-87ae-40e6-8d0f-b2a2492c171b-node-certs\") pod \"calico-node-mq88f\" (UID: \"b6df9072-87ae-40e6-8d0f-b2a2492c171b\") " pod="calico-system/calico-node-mq88f" Jul 10 00:38:56.547349 kubelet[1938]: E0710 00:38:56.547289 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zmrl9" podUID="e5aa62d9-8cf0-4934-8250-b0d96b853d89" Jul 10 00:38:56.615539 kubelet[1938]: I0710 00:38:56.615498 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qdb5v\" (UniqueName: \"kubernetes.io/projected/e5aa62d9-8cf0-4934-8250-b0d96b853d89-kube-api-access-qdb5v\") pod \"csi-node-driver-zmrl9\" (UID: \"e5aa62d9-8cf0-4934-8250-b0d96b853d89\") " pod="calico-system/csi-node-driver-zmrl9" Jul 10 00:38:56.615539 kubelet[1938]: I0710 00:38:56.615544 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/e5aa62d9-8cf0-4934-8250-b0d96b853d89-socket-dir\") pod \"csi-node-driver-zmrl9\" (UID: \"e5aa62d9-8cf0-4934-8250-b0d96b853d89\") " pod="calico-system/csi-node-driver-zmrl9" Jul 10 00:38:56.615807 kubelet[1938]: I0710 00:38:56.615583 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/e5aa62d9-8cf0-4934-8250-b0d96b853d89-kubelet-dir\") pod \"csi-node-driver-zmrl9\" (UID: \"e5aa62d9-8cf0-4934-8250-b0d96b853d89\") " pod="calico-system/csi-node-driver-zmrl9" Jul 10 00:38:56.615807 kubelet[1938]: I0710 00:38:56.615611 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/e5aa62d9-8cf0-4934-8250-b0d96b853d89-registration-dir\") pod \"csi-node-driver-zmrl9\" (UID: \"e5aa62d9-8cf0-4934-8250-b0d96b853d89\") " pod="calico-system/csi-node-driver-zmrl9" Jul 10 00:38:56.615807 kubelet[1938]: I0710 00:38:56.615625 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/e5aa62d9-8cf0-4934-8250-b0d96b853d89-varrun\") pod \"csi-node-driver-zmrl9\" (UID: \"e5aa62d9-8cf0-4934-8250-b0d96b853d89\") " pod="calico-system/csi-node-driver-zmrl9" Jul 10 00:38:56.617159 kubelet[1938]: E0710 00:38:56.616985 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:56.617159 kubelet[1938]: W0710 00:38:56.617001 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:56.617159 kubelet[1938]: E0710 00:38:56.617027 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:56.621806 kubelet[1938]: E0710 00:38:56.620254 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:56.621806 kubelet[1938]: W0710 00:38:56.620287 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:56.621806 kubelet[1938]: E0710 00:38:56.620305 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:56.630362 kubelet[1938]: E0710 00:38:56.630261 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:56.630362 kubelet[1938]: W0710 00:38:56.630284 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:56.630362 kubelet[1938]: E0710 00:38:56.630318 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:56.683002 kubelet[1938]: E0710 00:38:56.682951 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:56.683701 env[1196]: time="2025-07-10T00:38:56.683654040Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-745c448964-ng4jm,Uid:991b5c47-54fa-4d3b-9b97-8ba3e787b955,Namespace:calico-system,Attempt:0,}" Jul 10 00:38:56.717637 kubelet[1938]: E0710 00:38:56.717573 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:56.717637 kubelet[1938]: W0710 00:38:56.717601 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:56.717637 kubelet[1938]: E0710 00:38:56.717625 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.384000 audit[2398]: NETFILTER_CFG table=filter:99 family=2 entries=22 op=nft_register_rule pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:57.384000 audit[2398]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffddf1aff0 a2=0 a3=7fffddf1afdc items=0 ppid=2046 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:57.387936 kubelet[1938]: E0710 00:38:56.717904 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.387936 kubelet[1938]: W0710 00:38:56.717914 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.387936 kubelet[1938]: E0710 00:38:56.717930 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.387936 kubelet[1938]: E0710 00:38:56.718700 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.387936 kubelet[1938]: W0710 00:38:56.718710 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.387936 kubelet[1938]: E0710 00:38:56.718727 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.387936 kubelet[1938]: E0710 00:38:56.718945 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.387936 kubelet[1938]: W0710 00:38:56.718955 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.387936 kubelet[1938]: E0710 00:38:56.719024 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.387936 kubelet[1938]: E0710 00:38:56.721005 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388147 kubelet[1938]: W0710 00:38:56.721028 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388147 kubelet[1938]: E0710 00:38:56.721070 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388147 kubelet[1938]: E0710 00:38:56.721233 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388147 kubelet[1938]: W0710 00:38:56.721243 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388147 kubelet[1938]: E0710 00:38:56.721282 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388147 kubelet[1938]: E0710 00:38:56.721396 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388147 kubelet[1938]: W0710 00:38:56.721402 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388147 kubelet[1938]: E0710 00:38:56.721424 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388147 kubelet[1938]: E0710 00:38:56.721548 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388147 kubelet[1938]: W0710 00:38:56.721556 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388424 env[1196]: time="2025-07-10T00:38:57.387953175Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mq88f,Uid:b6df9072-87ae-40e6-8d0f-b2a2492c171b,Namespace:calico-system,Attempt:0,}" Jul 10 00:38:57.388469 kubelet[1938]: E0710 00:38:56.721578 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388469 kubelet[1938]: E0710 00:38:56.721717 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388469 kubelet[1938]: W0710 00:38:56.721724 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388469 kubelet[1938]: E0710 00:38:56.721771 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388469 kubelet[1938]: E0710 00:38:56.721909 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388469 kubelet[1938]: W0710 00:38:56.721915 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388469 kubelet[1938]: E0710 00:38:56.721935 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388469 kubelet[1938]: E0710 00:38:56.722106 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388469 kubelet[1938]: W0710 00:38:56.722112 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388469 kubelet[1938]: E0710 00:38:56.722124 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388710 kubelet[1938]: E0710 00:38:56.722358 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388710 kubelet[1938]: W0710 00:38:56.722370 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388710 kubelet[1938]: E0710 00:38:56.722387 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388710 kubelet[1938]: E0710 00:38:56.722545 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388710 kubelet[1938]: W0710 00:38:56.722552 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388710 kubelet[1938]: E0710 00:38:56.722594 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388710 kubelet[1938]: E0710 00:38:56.722704 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388710 kubelet[1938]: W0710 00:38:56.722711 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388710 kubelet[1938]: E0710 00:38:56.722748 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388710 kubelet[1938]: E0710 00:38:56.722868 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388944 kubelet[1938]: W0710 00:38:56.722876 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388944 kubelet[1938]: E0710 00:38:56.722920 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388944 kubelet[1938]: E0710 00:38:56.723003 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388944 kubelet[1938]: W0710 00:38:56.723010 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388944 kubelet[1938]: E0710 00:38:56.723098 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388944 kubelet[1938]: E0710 00:38:56.723184 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388944 kubelet[1938]: W0710 00:38:56.723192 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.388944 kubelet[1938]: E0710 00:38:56.723205 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388944 kubelet[1938]: E0710 00:38:56.723383 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.388944 kubelet[1938]: W0710 00:38:56.723390 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389160 kubelet[1938]: E0710 00:38:56.723402 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389160 kubelet[1938]: E0710 00:38:56.723562 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389160 kubelet[1938]: W0710 00:38:56.723571 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389160 kubelet[1938]: E0710 00:38:56.723582 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389160 kubelet[1938]: E0710 00:38:56.723756 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389160 kubelet[1938]: W0710 00:38:56.723763 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389160 kubelet[1938]: E0710 00:38:56.723775 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389160 kubelet[1938]: E0710 00:38:56.723922 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389160 kubelet[1938]: W0710 00:38:56.723929 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389160 kubelet[1938]: E0710 00:38:56.723940 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389374 kubelet[1938]: E0710 00:38:56.724125 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389374 kubelet[1938]: W0710 00:38:56.724135 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389374 kubelet[1938]: E0710 00:38:56.724148 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389374 kubelet[1938]: E0710 00:38:56.724291 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389374 kubelet[1938]: W0710 00:38:56.724300 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389374 kubelet[1938]: E0710 00:38:56.724308 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389374 kubelet[1938]: E0710 00:38:56.724460 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389374 kubelet[1938]: W0710 00:38:56.724466 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389374 kubelet[1938]: E0710 00:38:56.724473 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389374 kubelet[1938]: E0710 00:38:56.822928 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389590 kubelet[1938]: W0710 00:38:56.822941 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389590 kubelet[1938]: E0710 00:38:56.822957 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389590 kubelet[1938]: E0710 00:38:56.823126 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389590 kubelet[1938]: W0710 00:38:56.823132 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389590 kubelet[1938]: E0710 00:38:56.823140 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389590 kubelet[1938]: E0710 00:38:56.923725 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389590 kubelet[1938]: W0710 00:38:56.923746 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389590 kubelet[1938]: E0710 00:38:56.923758 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389590 kubelet[1938]: E0710 00:38:56.923943 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389590 kubelet[1938]: W0710 00:38:56.923951 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389886 kubelet[1938]: E0710 00:38:56.923962 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389886 kubelet[1938]: E0710 00:38:57.024575 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389886 kubelet[1938]: W0710 00:38:57.024594 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389886 kubelet[1938]: E0710 00:38:57.024615 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389886 kubelet[1938]: E0710 00:38:57.024779 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389886 kubelet[1938]: W0710 00:38:57.024786 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389886 kubelet[1938]: E0710 00:38:57.024792 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.389886 kubelet[1938]: E0710 00:38:57.126035 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.389886 kubelet[1938]: W0710 00:38:57.126055 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.389886 kubelet[1938]: E0710 00:38:57.126078 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.390127 kubelet[1938]: E0710 00:38:57.126275 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.390127 kubelet[1938]: W0710 00:38:57.126283 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.390127 kubelet[1938]: E0710 00:38:57.126292 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.390127 kubelet[1938]: E0710 00:38:57.227160 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.390127 kubelet[1938]: W0710 00:38:57.227182 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.390127 kubelet[1938]: E0710 00:38:57.227204 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.390127 kubelet[1938]: E0710 00:38:57.227363 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.390127 kubelet[1938]: W0710 00:38:57.227370 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.390127 kubelet[1938]: E0710 00:38:57.227376 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.390127 kubelet[1938]: E0710 00:38:57.328637 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.390359 kubelet[1938]: W0710 00:38:57.328660 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.390359 kubelet[1938]: E0710 00:38:57.328681 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.390359 kubelet[1938]: E0710 00:38:57.328865 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.390359 kubelet[1938]: W0710 00:38:57.328877 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.390359 kubelet[1938]: E0710 00:38:57.328887 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.390359 kubelet[1938]: E0710 00:38:57.389838 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.390359 kubelet[1938]: W0710 00:38:57.389881 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.390359 kubelet[1938]: E0710 00:38:57.389906 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.388000 audit[2398]: NETFILTER_CFG table=nat:100 family=2 entries=12 op=nft_register_rule pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:38:57.388000 audit[2398]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffddf1aff0 a2=0 a3=0 items=0 ppid=2046 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.388000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:38:57.393056 kubelet[1938]: E0710 00:38:57.391400 1938 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:38:57.393056 kubelet[1938]: W0710 00:38:57.391410 1938 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:38:57.393056 kubelet[1938]: E0710 00:38:57.391421 1938 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:38:57.422175 env[1196]: time="2025-07-10T00:38:57.422090168Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:38:57.422175 env[1196]: time="2025-07-10T00:38:57.422137267Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:38:57.422175 env[1196]: time="2025-07-10T00:38:57.422149310Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:38:57.422413 env[1196]: time="2025-07-10T00:38:57.422295807Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c527febe0a0b1289b6621ddc236fabd447f07ef34d1964e061186f2a385c56fd pid=2415 runtime=io.containerd.runc.v2 Jul 10 00:38:57.422570 env[1196]: time="2025-07-10T00:38:57.422502897Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:38:57.422570 env[1196]: time="2025-07-10T00:38:57.422535599Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:38:57.422570 env[1196]: time="2025-07-10T00:38:57.422547271Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:38:57.422728 env[1196]: time="2025-07-10T00:38:57.422676896Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2cdebf1367c2c06b7ab3bf9be85e8cba6e3822362d709fe0f3e0c7c26abeb6cd pid=2417 runtime=io.containerd.runc.v2 Jul 10 00:38:57.432506 systemd[1]: Started cri-containerd-2cdebf1367c2c06b7ab3bf9be85e8cba6e3822362d709fe0f3e0c7c26abeb6cd.scope. Jul 10 00:38:57.441367 systemd[1]: Started cri-containerd-c527febe0a0b1289b6621ddc236fabd447f07ef34d1964e061186f2a385c56fd.scope. Jul 10 00:38:57.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.446000 audit: BPF prog-id=118 op=LOAD Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2417 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646562663133363763326330366237616233626639626538356538 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2417 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646562663133363763326330366237616233626639626538356538 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit: BPF prog-id=119 op=LOAD Jul 10 00:38:57.447000 audit[2435]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003c0290 items=0 ppid=2417 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646562663133363763326330366237616233626639626538356538 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit: BPF prog-id=120 op=LOAD Jul 10 00:38:57.447000 audit[2435]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003c02d8 items=0 ppid=2417 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646562663133363763326330366237616233626639626538356538 Jul 10 00:38:57.447000 audit: BPF prog-id=120 op=UNLOAD Jul 10 00:38:57.447000 audit: BPF prog-id=119 op=UNLOAD Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { perfmon } for pid=2435 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit[2435]: AVC avc: denied { bpf } for pid=2435 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.447000 audit: BPF prog-id=121 op=LOAD Jul 10 00:38:57.447000 audit[2435]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c06e8 items=0 ppid=2417 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646562663133363763326330366237616233626639626538356538 Jul 10 00:38:57.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit: BPF prog-id=122 op=LOAD Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2415 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335323766656265306130623132383962363632316464633233366661 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2415 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335323766656265306130623132383962363632316464633233366661 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit: BPF prog-id=123 op=LOAD Jul 10 00:38:57.453000 audit[2436]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000366850 items=0 ppid=2415 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335323766656265306130623132383962363632316464633233366661 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.453000 audit: BPF prog-id=124 op=LOAD Jul 10 00:38:57.453000 audit[2436]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000366898 items=0 ppid=2415 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335323766656265306130623132383962363632316464633233366661 Jul 10 00:38:57.453000 audit: BPF prog-id=124 op=UNLOAD Jul 10 00:38:57.453000 audit: BPF prog-id=123 op=UNLOAD Jul 10 00:38:57.454000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.454000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.454000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.454000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.454000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.454000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.454000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.454000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.454000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.454000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:57.454000 audit: BPF prog-id=125 op=LOAD Jul 10 00:38:57.454000 audit[2436]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000366ca8 items=0 ppid=2415 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:57.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6335323766656265306130623132383962363632316464633233366661 Jul 10 00:38:57.460110 env[1196]: time="2025-07-10T00:38:57.459584939Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-mq88f,Uid:b6df9072-87ae-40e6-8d0f-b2a2492c171b,Namespace:calico-system,Attempt:0,} returns sandbox id \"2cdebf1367c2c06b7ab3bf9be85e8cba6e3822362d709fe0f3e0c7c26abeb6cd\"" Jul 10 00:38:57.461029 env[1196]: time="2025-07-10T00:38:57.461001813Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 10 00:38:57.480601 env[1196]: time="2025-07-10T00:38:57.480563605Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-745c448964-ng4jm,Uid:991b5c47-54fa-4d3b-9b97-8ba3e787b955,Namespace:calico-system,Attempt:0,} returns sandbox id \"c527febe0a0b1289b6621ddc236fabd447f07ef34d1964e061186f2a385c56fd\"" Jul 10 00:38:57.481363 kubelet[1938]: E0710 00:38:57.481330 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:38:58.585502 kubelet[1938]: E0710 00:38:58.585434 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zmrl9" podUID="e5aa62d9-8cf0-4934-8250-b0d96b853d89" Jul 10 00:38:58.803931 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2333074752.mount: Deactivated successfully. Jul 10 00:38:58.913475 env[1196]: time="2025-07-10T00:38:58.913322356Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:58.915442 env[1196]: time="2025-07-10T00:38:58.915393874Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:58.916887 env[1196]: time="2025-07-10T00:38:58.916860592Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:58.918526 env[1196]: time="2025-07-10T00:38:58.918494835Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:38:58.918872 env[1196]: time="2025-07-10T00:38:58.918821993Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 10 00:38:58.919812 env[1196]: time="2025-07-10T00:38:58.919781323Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 10 00:38:58.921077 env[1196]: time="2025-07-10T00:38:58.921057119Z" level=info msg="CreateContainer within sandbox \"2cdebf1367c2c06b7ab3bf9be85e8cba6e3822362d709fe0f3e0c7c26abeb6cd\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 10 00:38:58.935015 env[1196]: time="2025-07-10T00:38:58.934974038Z" level=info msg="CreateContainer within sandbox \"2cdebf1367c2c06b7ab3bf9be85e8cba6e3822362d709fe0f3e0c7c26abeb6cd\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"e480753bc0d15fb7d96c8249c09526313d1722d7765a778ffe02aa983facd83f\"" Jul 10 00:38:58.935295 env[1196]: time="2025-07-10T00:38:58.935275326Z" level=info msg="StartContainer for \"e480753bc0d15fb7d96c8249c09526313d1722d7765a778ffe02aa983facd83f\"" Jul 10 00:38:58.950134 systemd[1]: Started cri-containerd-e480753bc0d15fb7d96c8249c09526313d1722d7765a778ffe02aa983facd83f.scope. Jul 10 00:38:58.970898 kernel: kauditd_printk_skb: 145 callbacks suppressed Jul 10 00:38:58.971040 kernel: audit: type=1400 audit(1752107938.966:958): avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.971063 kernel: audit: type=1300 audit(1752107938.966:958): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb888a36b58 items=0 ppid=2417 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fb888a36b58 items=0 ppid=2417 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:58.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383037353362633064313566623764393663383234396330393532 Jul 10 00:38:58.979369 kernel: audit: type=1327 audit(1752107938.966:958): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383037353362633064313566623764393663383234396330393532 Jul 10 00:38:58.979432 kernel: audit: type=1400 audit(1752107938.966:959): avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.984817 kernel: audit: type=1400 audit(1752107938.966:959): avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.990807 kernel: audit: type=1400 audit(1752107938.966:959): avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.990869 kernel: audit: type=1400 audit(1752107938.966:959): avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.990886 kernel: audit: type=1400 audit(1752107938.966:959): avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.997412 kernel: audit: type=1400 audit(1752107938.966:959): avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:59.000798 kernel: audit: type=1400 audit(1752107938.966:959): avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.966000 audit: BPF prog-id=126 op=LOAD Jul 10 00:38:58.966000 audit[2490]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0002dbba8 items=0 ppid=2417 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:58.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383037353362633064313566623764393663383234396330393532 Jul 10 00:38:58.967000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.967000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.967000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.967000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.967000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.967000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.967000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.967000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.967000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.967000 audit: BPF prog-id=127 op=LOAD Jul 10 00:38:58.967000 audit[2490]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0002dbbf8 items=0 ppid=2417 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:58.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383037353362633064313566623764393663383234396330393532 Jul 10 00:38:58.975000 audit: BPF prog-id=127 op=UNLOAD Jul 10 00:38:58.975000 audit: BPF prog-id=126 op=UNLOAD Jul 10 00:38:58.975000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.975000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.975000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.975000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.975000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.975000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.975000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.975000 audit[2490]: AVC avc: denied { perfmon } for pid=2490 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.975000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.975000 audit[2490]: AVC avc: denied { bpf } for pid=2490 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:38:58.975000 audit: BPF prog-id=128 op=LOAD Jul 10 00:38:58.975000 audit[2490]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002dbc88 items=0 ppid=2417 pid=2490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:38:58.975000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383037353362633064313566623764393663383234396330393532 Jul 10 00:38:59.011037 systemd[1]: cri-containerd-e480753bc0d15fb7d96c8249c09526313d1722d7765a778ffe02aa983facd83f.scope: Deactivated successfully. Jul 10 00:38:59.014000 audit: BPF prog-id=128 op=UNLOAD Jul 10 00:38:59.027972 env[1196]: time="2025-07-10T00:38:59.027918503Z" level=info msg="StartContainer for \"e480753bc0d15fb7d96c8249c09526313d1722d7765a778ffe02aa983facd83f\" returns successfully" Jul 10 00:38:59.059807 env[1196]: time="2025-07-10T00:38:59.059745492Z" level=info msg="shim disconnected" id=e480753bc0d15fb7d96c8249c09526313d1722d7765a778ffe02aa983facd83f Jul 10 00:38:59.059807 env[1196]: time="2025-07-10T00:38:59.059798161Z" level=warning msg="cleaning up after shim disconnected" id=e480753bc0d15fb7d96c8249c09526313d1722d7765a778ffe02aa983facd83f namespace=k8s.io Jul 10 00:38:59.059807 env[1196]: time="2025-07-10T00:38:59.059808451Z" level=info msg="cleaning up dead shim" Jul 10 00:38:59.066609 env[1196]: time="2025-07-10T00:38:59.066586114Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:38:59Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2530 runtime=io.containerd.runc.v2\n" Jul 10 00:38:59.761516 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e480753bc0d15fb7d96c8249c09526313d1722d7765a778ffe02aa983facd83f-rootfs.mount: Deactivated successfully. Jul 10 00:39:00.584648 kubelet[1938]: E0710 00:39:00.584603 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zmrl9" podUID="e5aa62d9-8cf0-4934-8250-b0d96b853d89" Jul 10 00:39:01.121950 env[1196]: time="2025-07-10T00:39:01.121905220Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:01.124009 env[1196]: time="2025-07-10T00:39:01.123982515Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:01.125630 env[1196]: time="2025-07-10T00:39:01.125570108Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:01.130719 env[1196]: time="2025-07-10T00:39:01.130648310Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:01.131144 env[1196]: time="2025-07-10T00:39:01.131115700Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 10 00:39:01.132301 env[1196]: time="2025-07-10T00:39:01.132229229Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 10 00:39:01.139672 env[1196]: time="2025-07-10T00:39:01.139603248Z" level=info msg="CreateContainer within sandbox \"c527febe0a0b1289b6621ddc236fabd447f07ef34d1964e061186f2a385c56fd\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 10 00:39:01.154340 env[1196]: time="2025-07-10T00:39:01.154288277Z" level=info msg="CreateContainer within sandbox \"c527febe0a0b1289b6621ddc236fabd447f07ef34d1964e061186f2a385c56fd\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"786ce696b6e5f9d79566c7340e3567f6ce3dfbe06fc545997d8472a78b4ef76e\"" Jul 10 00:39:01.154806 env[1196]: time="2025-07-10T00:39:01.154783912Z" level=info msg="StartContainer for \"786ce696b6e5f9d79566c7340e3567f6ce3dfbe06fc545997d8472a78b4ef76e\"" Jul 10 00:39:01.171035 systemd[1]: Started cri-containerd-786ce696b6e5f9d79566c7340e3567f6ce3dfbe06fc545997d8472a78b4ef76e.scope. Jul 10 00:39:01.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit: BPF prog-id=129 op=LOAD Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2415 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:01.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738366365363936623665356639643739353636633733343065333536 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2415 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:01.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738366365363936623665356639643739353636633733343065333536 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit: BPF prog-id=130 op=LOAD Jul 10 00:39:01.180000 audit[2556]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003deb70 items=0 ppid=2415 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:01.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738366365363936623665356639643739353636633733343065333536 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit: BPF prog-id=131 op=LOAD Jul 10 00:39:01.180000 audit[2556]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003debb8 items=0 ppid=2415 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:01.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738366365363936623665356639643739353636633733343065333536 Jul 10 00:39:01.180000 audit: BPF prog-id=131 op=UNLOAD Jul 10 00:39:01.180000 audit: BPF prog-id=130 op=UNLOAD Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { perfmon } for pid=2556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit[2556]: AVC avc: denied { bpf } for pid=2556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:01.180000 audit: BPF prog-id=132 op=LOAD Jul 10 00:39:01.180000 audit[2556]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003defc8 items=0 ppid=2415 pid=2556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:01.180000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738366365363936623665356639643739353636633733343065333536 Jul 10 00:39:01.209304 env[1196]: time="2025-07-10T00:39:01.209252969Z" level=info msg="StartContainer for \"786ce696b6e5f9d79566c7340e3567f6ce3dfbe06fc545997d8472a78b4ef76e\" returns successfully" Jul 10 00:39:01.640307 kubelet[1938]: E0710 00:39:01.640271 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:01.650268 kubelet[1938]: I0710 00:39:01.650210 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-745c448964-ng4jm" podStartSLOduration=2.000256225 podStartE2EDuration="5.650194701s" podCreationTimestamp="2025-07-10 00:38:56 +0000 UTC" firstStartedPulling="2025-07-10 00:38:57.482073875 +0000 UTC m=+20.975700151" lastFinishedPulling="2025-07-10 00:39:01.132012331 +0000 UTC m=+24.625638627" observedRunningTime="2025-07-10 00:39:01.64986511 +0000 UTC m=+25.143491386" watchObservedRunningTime="2025-07-10 00:39:01.650194701 +0000 UTC m=+25.143820977" Jul 10 00:39:02.585025 kubelet[1938]: E0710 00:39:02.584962 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zmrl9" podUID="e5aa62d9-8cf0-4934-8250-b0d96b853d89" Jul 10 00:39:02.643188 kubelet[1938]: I0710 00:39:02.643149 1938 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:39:02.644043 kubelet[1938]: E0710 00:39:02.643541 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:04.586605 kubelet[1938]: E0710 00:39:04.586559 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zmrl9" podUID="e5aa62d9-8cf0-4934-8250-b0d96b853d89" Jul 10 00:39:05.599207 kubelet[1938]: I0710 00:39:05.599132 1938 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:39:05.599944 kubelet[1938]: E0710 00:39:05.599536 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:05.648505 kubelet[1938]: E0710 00:39:05.648459 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:05.897044 env[1196]: time="2025-07-10T00:39:05.896908496Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:05.899957 env[1196]: time="2025-07-10T00:39:05.899914566Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:05.901880 env[1196]: time="2025-07-10T00:39:05.901558311Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:05.903282 env[1196]: time="2025-07-10T00:39:05.903234878Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:05.903826 env[1196]: time="2025-07-10T00:39:05.903785234Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 10 00:39:05.906763 env[1196]: time="2025-07-10T00:39:05.906724639Z" level=info msg="CreateContainer within sandbox \"2cdebf1367c2c06b7ab3bf9be85e8cba6e3822362d709fe0f3e0c7c26abeb6cd\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 10 00:39:05.910886 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 10 00:39:05.911020 kernel: audit: type=1325 audit(1752107945.906:983): table=filter:101 family=2 entries=21 op=nft_register_rule pid=2589 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:05.911051 kernel: audit: type=1300 audit(1752107945.906:983): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffddee4da30 a2=0 a3=7ffddee4da1c items=0 ppid=2046 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:05.906000 audit[2589]: NETFILTER_CFG table=filter:101 family=2 entries=21 op=nft_register_rule pid=2589 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:05.906000 audit[2589]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffddee4da30 a2=0 a3=7ffddee4da1c items=0 ppid=2046 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:05.919234 kernel: audit: type=1327 audit(1752107945.906:983): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:05.906000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:05.920000 audit[2589]: NETFILTER_CFG table=nat:102 family=2 entries=19 op=nft_register_chain pid=2589 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:05.923084 env[1196]: time="2025-07-10T00:39:05.923031783Z" level=info msg="CreateContainer within sandbox \"2cdebf1367c2c06b7ab3bf9be85e8cba6e3822362d709fe0f3e0c7c26abeb6cd\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"abe27f58f8ae6ec427963dd2c55ed695cde33909b84de5b31e38e212b13ab2e9\"" Jul 10 00:39:05.920000 audit[2589]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffddee4da30 a2=0 a3=7ffddee4da1c items=0 ppid=2046 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:05.924104 env[1196]: time="2025-07-10T00:39:05.923935324Z" level=info msg="StartContainer for \"abe27f58f8ae6ec427963dd2c55ed695cde33909b84de5b31e38e212b13ab2e9\"" Jul 10 00:39:05.928634 kernel: audit: type=1325 audit(1752107945.920:984): table=nat:102 family=2 entries=19 op=nft_register_chain pid=2589 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:05.928713 kernel: audit: type=1300 audit(1752107945.920:984): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffddee4da30 a2=0 a3=7ffddee4da1c items=0 ppid=2046 pid=2589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:05.928739 kernel: audit: type=1327 audit(1752107945.920:984): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:05.920000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:05.947306 systemd[1]: Started cri-containerd-abe27f58f8ae6ec427963dd2c55ed695cde33909b84de5b31e38e212b13ab2e9.scope. Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit[2597]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7fa835afb9e8 items=0 ppid=2417 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:05.969281 kernel: audit: type=1400 audit(1752107945.959:985): avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.969332 kernel: audit: type=1300 audit(1752107945.959:985): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7fa835afb9e8 items=0 ppid=2417 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:05.969361 kernel: audit: type=1327 audit(1752107945.959:985): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162653237663538663861653665633432373936336464326335356564 Jul 10 00:39:05.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162653237663538663861653665633432373936336464326335356564 Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.977099 kernel: audit: type=1400 audit(1752107945.959:986): avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.959000 audit: BPF prog-id=133 op=LOAD Jul 10 00:39:05.959000 audit[2597]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000281928 items=0 ppid=2417 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:05.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162653237663538663861653665633432373936336464326335356564 Jul 10 00:39:05.968000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.968000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.968000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.968000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.968000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.968000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.968000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.968000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.968000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.968000 audit: BPF prog-id=134 op=LOAD Jul 10 00:39:05.968000 audit[2597]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000281978 items=0 ppid=2417 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:05.968000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162653237663538663861653665633432373936336464326335356564 Jul 10 00:39:05.973000 audit: BPF prog-id=134 op=UNLOAD Jul 10 00:39:05.973000 audit: BPF prog-id=133 op=UNLOAD Jul 10 00:39:05.973000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.973000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.973000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.973000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.973000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.973000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.973000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.973000 audit[2597]: AVC avc: denied { perfmon } for pid=2597 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.973000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.973000 audit[2597]: AVC avc: denied { bpf } for pid=2597 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:05.973000 audit: BPF prog-id=135 op=LOAD Jul 10 00:39:05.973000 audit[2597]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000281a08 items=0 ppid=2417 pid=2597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:05.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162653237663538663861653665633432373936336464326335356564 Jul 10 00:39:05.990762 env[1196]: time="2025-07-10T00:39:05.990721213Z" level=info msg="StartContainer for \"abe27f58f8ae6ec427963dd2c55ed695cde33909b84de5b31e38e212b13ab2e9\" returns successfully" Jul 10 00:39:06.626432 kubelet[1938]: E0710 00:39:06.626249 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zmrl9" podUID="e5aa62d9-8cf0-4934-8250-b0d96b853d89" Jul 10 00:39:07.282784 systemd[1]: cri-containerd-abe27f58f8ae6ec427963dd2c55ed695cde33909b84de5b31e38e212b13ab2e9.scope: Deactivated successfully. Jul 10 00:39:07.289000 audit: BPF prog-id=135 op=UNLOAD Jul 10 00:39:07.302006 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-abe27f58f8ae6ec427963dd2c55ed695cde33909b84de5b31e38e212b13ab2e9-rootfs.mount: Deactivated successfully. Jul 10 00:39:07.306994 env[1196]: time="2025-07-10T00:39:07.306937947Z" level=info msg="shim disconnected" id=abe27f58f8ae6ec427963dd2c55ed695cde33909b84de5b31e38e212b13ab2e9 Jul 10 00:39:07.306994 env[1196]: time="2025-07-10T00:39:07.306982080Z" level=warning msg="cleaning up after shim disconnected" id=abe27f58f8ae6ec427963dd2c55ed695cde33909b84de5b31e38e212b13ab2e9 namespace=k8s.io Jul 10 00:39:07.306994 env[1196]: time="2025-07-10T00:39:07.306991518Z" level=info msg="cleaning up dead shim" Jul 10 00:39:07.314396 env[1196]: time="2025-07-10T00:39:07.314353534Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:39:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2637 runtime=io.containerd.runc.v2\n" Jul 10 00:39:07.341199 kubelet[1938]: I0710 00:39:07.341163 1938 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 10 00:39:07.372494 systemd[1]: Created slice kubepods-burstable-podf8f65afc_561e_4d28_b1a1_4952487d5e88.slice. Jul 10 00:39:07.378942 systemd[1]: Created slice kubepods-besteffort-podc0b395d4_9441_4e9b_8858_23c201917aba.slice. Jul 10 00:39:07.383606 systemd[1]: Created slice kubepods-besteffort-pod9976c401_4bc0_4c73_b329_4a241a0db49c.slice. Jul 10 00:39:07.390051 systemd[1]: Created slice kubepods-burstable-pod3999c732_217c_4b04_9aa6_4feadf6686cd.slice. Jul 10 00:39:07.393904 systemd[1]: Created slice kubepods-besteffort-podfdf484de_e1cd_42c7_aa05_0614545158c1.slice. Jul 10 00:39:07.400409 systemd[1]: Created slice kubepods-besteffort-poddcbc48e0_8448_4980_ac86_8660732ecd60.slice. Jul 10 00:39:07.405478 systemd[1]: Created slice kubepods-besteffort-podbd0e32d5_4df5_4eff_bb27_62bde1381e95.slice. Jul 10 00:39:07.530446 kubelet[1938]: I0710 00:39:07.530354 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zhp2b\" (UniqueName: \"kubernetes.io/projected/3999c732-217c-4b04-9aa6-4feadf6686cd-kube-api-access-zhp2b\") pod \"coredns-7c65d6cfc9-rrm9z\" (UID: \"3999c732-217c-4b04-9aa6-4feadf6686cd\") " pod="kube-system/coredns-7c65d6cfc9-rrm9z" Jul 10 00:39:07.530446 kubelet[1938]: I0710 00:39:07.530398 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7tqch\" (UniqueName: \"kubernetes.io/projected/bd0e32d5-4df5-4eff-bb27-62bde1381e95-kube-api-access-7tqch\") pod \"whisker-c8bcc675-dwv4n\" (UID: \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\") " pod="calico-system/whisker-c8bcc675-dwv4n" Jul 10 00:39:07.530446 kubelet[1938]: I0710 00:39:07.530418 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dh28j\" (UniqueName: \"kubernetes.io/projected/f8f65afc-561e-4d28-b1a1-4952487d5e88-kube-api-access-dh28j\") pod \"coredns-7c65d6cfc9-jqbfq\" (UID: \"f8f65afc-561e-4d28-b1a1-4952487d5e88\") " pod="kube-system/coredns-7c65d6cfc9-jqbfq" Jul 10 00:39:07.530446 kubelet[1938]: I0710 00:39:07.530432 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fdf484de-e1cd-42c7-aa05-0614545158c1-tigera-ca-bundle\") pod \"calico-kube-controllers-77d569b777-mmjg7\" (UID: \"fdf484de-e1cd-42c7-aa05-0614545158c1\") " pod="calico-system/calico-kube-controllers-77d569b777-mmjg7" Jul 10 00:39:07.530773 kubelet[1938]: I0710 00:39:07.530515 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/3999c732-217c-4b04-9aa6-4feadf6686cd-config-volume\") pod \"coredns-7c65d6cfc9-rrm9z\" (UID: \"3999c732-217c-4b04-9aa6-4feadf6686cd\") " pod="kube-system/coredns-7c65d6cfc9-rrm9z" Jul 10 00:39:07.530773 kubelet[1938]: I0710 00:39:07.530586 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/dcbc48e0-8448-4980-ac86-8660732ecd60-calico-apiserver-certs\") pod \"calico-apiserver-5cd7f67fb4-8bxgr\" (UID: \"dcbc48e0-8448-4980-ac86-8660732ecd60\") " pod="calico-apiserver/calico-apiserver-5cd7f67fb4-8bxgr" Jul 10 00:39:07.530773 kubelet[1938]: I0710 00:39:07.530625 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/bd0e32d5-4df5-4eff-bb27-62bde1381e95-whisker-backend-key-pair\") pod \"whisker-c8bcc675-dwv4n\" (UID: \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\") " pod="calico-system/whisker-c8bcc675-dwv4n" Jul 10 00:39:07.530773 kubelet[1938]: I0710 00:39:07.530647 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/f8f65afc-561e-4d28-b1a1-4952487d5e88-config-volume\") pod \"coredns-7c65d6cfc9-jqbfq\" (UID: \"f8f65afc-561e-4d28-b1a1-4952487d5e88\") " pod="kube-system/coredns-7c65d6cfc9-jqbfq" Jul 10 00:39:07.530773 kubelet[1938]: I0710 00:39:07.530669 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2wcnx\" (UniqueName: \"kubernetes.io/projected/fdf484de-e1cd-42c7-aa05-0614545158c1-kube-api-access-2wcnx\") pod \"calico-kube-controllers-77d569b777-mmjg7\" (UID: \"fdf484de-e1cd-42c7-aa05-0614545158c1\") " pod="calico-system/calico-kube-controllers-77d569b777-mmjg7" Jul 10 00:39:07.531003 kubelet[1938]: I0710 00:39:07.530705 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/9976c401-4bc0-4c73-b329-4a241a0db49c-config\") pod \"goldmane-58fd7646b9-wv28v\" (UID: \"9976c401-4bc0-4c73-b329-4a241a0db49c\") " pod="calico-system/goldmane-58fd7646b9-wv28v" Jul 10 00:39:07.531003 kubelet[1938]: I0710 00:39:07.530724 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/9976c401-4bc0-4c73-b329-4a241a0db49c-goldmane-key-pair\") pod \"goldmane-58fd7646b9-wv28v\" (UID: \"9976c401-4bc0-4c73-b329-4a241a0db49c\") " pod="calico-system/goldmane-58fd7646b9-wv28v" Jul 10 00:39:07.531003 kubelet[1938]: I0710 00:39:07.530771 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bd0e32d5-4df5-4eff-bb27-62bde1381e95-whisker-ca-bundle\") pod \"whisker-c8bcc675-dwv4n\" (UID: \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\") " pod="calico-system/whisker-c8bcc675-dwv4n" Jul 10 00:39:07.531003 kubelet[1938]: I0710 00:39:07.530804 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2qws2\" (UniqueName: \"kubernetes.io/projected/9976c401-4bc0-4c73-b329-4a241a0db49c-kube-api-access-2qws2\") pod \"goldmane-58fd7646b9-wv28v\" (UID: \"9976c401-4bc0-4c73-b329-4a241a0db49c\") " pod="calico-system/goldmane-58fd7646b9-wv28v" Jul 10 00:39:07.531003 kubelet[1938]: I0710 00:39:07.530871 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9976c401-4bc0-4c73-b329-4a241a0db49c-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-wv28v\" (UID: \"9976c401-4bc0-4c73-b329-4a241a0db49c\") " pod="calico-system/goldmane-58fd7646b9-wv28v" Jul 10 00:39:07.531184 kubelet[1938]: I0710 00:39:07.530911 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wl9tl\" (UniqueName: \"kubernetes.io/projected/dcbc48e0-8448-4980-ac86-8660732ecd60-kube-api-access-wl9tl\") pod \"calico-apiserver-5cd7f67fb4-8bxgr\" (UID: \"dcbc48e0-8448-4980-ac86-8660732ecd60\") " pod="calico-apiserver/calico-apiserver-5cd7f67fb4-8bxgr" Jul 10 00:39:07.531184 kubelet[1938]: I0710 00:39:07.530943 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c0b395d4-9441-4e9b-8858-23c201917aba-calico-apiserver-certs\") pod \"calico-apiserver-5cd7f67fb4-k4g4b\" (UID: \"c0b395d4-9441-4e9b-8858-23c201917aba\") " pod="calico-apiserver/calico-apiserver-5cd7f67fb4-k4g4b" Jul 10 00:39:07.531184 kubelet[1938]: I0710 00:39:07.530977 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5z8x7\" (UniqueName: \"kubernetes.io/projected/c0b395d4-9441-4e9b-8858-23c201917aba-kube-api-access-5z8x7\") pod \"calico-apiserver-5cd7f67fb4-k4g4b\" (UID: \"c0b395d4-9441-4e9b-8858-23c201917aba\") " pod="calico-apiserver/calico-apiserver-5cd7f67fb4-k4g4b" Jul 10 00:39:07.655499 env[1196]: time="2025-07-10T00:39:07.655281076Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 10 00:39:07.677918 kubelet[1938]: E0710 00:39:07.677875 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:07.678637 env[1196]: time="2025-07-10T00:39:07.678590466Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jqbfq,Uid:f8f65afc-561e-4d28-b1a1-4952487d5e88,Namespace:kube-system,Attempt:0,}" Jul 10 00:39:07.681796 env[1196]: time="2025-07-10T00:39:07.681767786Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cd7f67fb4-k4g4b,Uid:c0b395d4-9441-4e9b-8858-23c201917aba,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:39:07.686523 env[1196]: time="2025-07-10T00:39:07.686481186Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-wv28v,Uid:9976c401-4bc0-4c73-b329-4a241a0db49c,Namespace:calico-system,Attempt:0,}" Jul 10 00:39:07.692685 kubelet[1938]: E0710 00:39:07.692644 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:07.693013 env[1196]: time="2025-07-10T00:39:07.692959018Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-rrm9z,Uid:3999c732-217c-4b04-9aa6-4feadf6686cd,Namespace:kube-system,Attempt:0,}" Jul 10 00:39:07.697577 env[1196]: time="2025-07-10T00:39:07.697544238Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-77d569b777-mmjg7,Uid:fdf484de-e1cd-42c7-aa05-0614545158c1,Namespace:calico-system,Attempt:0,}" Jul 10 00:39:07.703061 env[1196]: time="2025-07-10T00:39:07.703022378Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cd7f67fb4-8bxgr,Uid:dcbc48e0-8448-4980-ac86-8660732ecd60,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:39:07.709037 env[1196]: time="2025-07-10T00:39:07.709012201Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-c8bcc675-dwv4n,Uid:bd0e32d5-4df5-4eff-bb27-62bde1381e95,Namespace:calico-system,Attempt:0,}" Jul 10 00:39:07.797688 env[1196]: time="2025-07-10T00:39:07.797615988Z" level=error msg="Failed to destroy network for sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.797990 env[1196]: time="2025-07-10T00:39:07.797959264Z" level=error msg="encountered an error cleaning up failed sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.798055 env[1196]: time="2025-07-10T00:39:07.798005571Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-wv28v,Uid:9976c401-4bc0-4c73-b329-4a241a0db49c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.798261 kubelet[1938]: E0710 00:39:07.798210 1938 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.798338 kubelet[1938]: E0710 00:39:07.798304 1938 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-wv28v" Jul 10 00:39:07.798338 kubelet[1938]: E0710 00:39:07.798324 1938 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-wv28v" Jul 10 00:39:07.798392 kubelet[1938]: E0710 00:39:07.798373 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-wv28v_calico-system(9976c401-4bc0-4c73-b329-4a241a0db49c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-wv28v_calico-system(9976c401-4bc0-4c73-b329-4a241a0db49c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-wv28v" podUID="9976c401-4bc0-4c73-b329-4a241a0db49c" Jul 10 00:39:07.799438 env[1196]: time="2025-07-10T00:39:07.799379107Z" level=error msg="Failed to destroy network for sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.799976 env[1196]: time="2025-07-10T00:39:07.799949610Z" level=error msg="encountered an error cleaning up failed sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.800084 env[1196]: time="2025-07-10T00:39:07.800057553Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jqbfq,Uid:f8f65afc-561e-4d28-b1a1-4952487d5e88,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.800662 kubelet[1938]: E0710 00:39:07.800566 1938 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.800662 kubelet[1938]: E0710 00:39:07.800594 1938 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-jqbfq" Jul 10 00:39:07.800662 kubelet[1938]: E0710 00:39:07.800608 1938 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-jqbfq" Jul 10 00:39:07.800772 kubelet[1938]: E0710 00:39:07.800631 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-jqbfq_kube-system(f8f65afc-561e-4d28-b1a1-4952487d5e88)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-jqbfq_kube-system(f8f65afc-561e-4d28-b1a1-4952487d5e88)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-jqbfq" podUID="f8f65afc-561e-4d28-b1a1-4952487d5e88" Jul 10 00:39:07.816869 env[1196]: time="2025-07-10T00:39:07.816799082Z" level=error msg="Failed to destroy network for sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.817323 env[1196]: time="2025-07-10T00:39:07.817298161Z" level=error msg="encountered an error cleaning up failed sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.817431 env[1196]: time="2025-07-10T00:39:07.817403640Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-rrm9z,Uid:3999c732-217c-4b04-9aa6-4feadf6686cd,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.818734 kubelet[1938]: E0710 00:39:07.817691 1938 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.818734 kubelet[1938]: E0710 00:39:07.817754 1938 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-rrm9z" Jul 10 00:39:07.818734 kubelet[1938]: E0710 00:39:07.817772 1938 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-rrm9z" Jul 10 00:39:07.818870 kubelet[1938]: E0710 00:39:07.817812 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-rrm9z_kube-system(3999c732-217c-4b04-9aa6-4feadf6686cd)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-rrm9z_kube-system(3999c732-217c-4b04-9aa6-4feadf6686cd)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-rrm9z" podUID="3999c732-217c-4b04-9aa6-4feadf6686cd" Jul 10 00:39:07.828349 env[1196]: time="2025-07-10T00:39:07.828287604Z" level=error msg="Failed to destroy network for sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.828625 env[1196]: time="2025-07-10T00:39:07.828592378Z" level=error msg="encountered an error cleaning up failed sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.828693 env[1196]: time="2025-07-10T00:39:07.828641109Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cd7f67fb4-k4g4b,Uid:c0b395d4-9441-4e9b-8858-23c201917aba,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.828912 kubelet[1938]: E0710 00:39:07.828861 1938 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.828983 kubelet[1938]: E0710 00:39:07.828935 1938 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cd7f67fb4-k4g4b" Jul 10 00:39:07.828983 kubelet[1938]: E0710 00:39:07.828958 1938 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cd7f67fb4-k4g4b" Jul 10 00:39:07.829041 kubelet[1938]: E0710 00:39:07.829008 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5cd7f67fb4-k4g4b_calico-apiserver(c0b395d4-9441-4e9b-8858-23c201917aba)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5cd7f67fb4-k4g4b_calico-apiserver(c0b395d4-9441-4e9b-8858-23c201917aba)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cd7f67fb4-k4g4b" podUID="c0b395d4-9441-4e9b-8858-23c201917aba" Jul 10 00:39:07.842711 env[1196]: time="2025-07-10T00:39:07.842657999Z" level=error msg="Failed to destroy network for sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.843148 env[1196]: time="2025-07-10T00:39:07.843120039Z" level=error msg="encountered an error cleaning up failed sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.843265 env[1196]: time="2025-07-10T00:39:07.843227631Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cd7f67fb4-8bxgr,Uid:dcbc48e0-8448-4980-ac86-8660732ecd60,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.843571 kubelet[1938]: E0710 00:39:07.843536 1938 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.843653 kubelet[1938]: E0710 00:39:07.843582 1938 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cd7f67fb4-8bxgr" Jul 10 00:39:07.843653 kubelet[1938]: E0710 00:39:07.843606 1938 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5cd7f67fb4-8bxgr" Jul 10 00:39:07.843709 kubelet[1938]: E0710 00:39:07.843645 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5cd7f67fb4-8bxgr_calico-apiserver(dcbc48e0-8448-4980-ac86-8660732ecd60)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5cd7f67fb4-8bxgr_calico-apiserver(dcbc48e0-8448-4980-ac86-8660732ecd60)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cd7f67fb4-8bxgr" podUID="dcbc48e0-8448-4980-ac86-8660732ecd60" Jul 10 00:39:07.850410 env[1196]: time="2025-07-10T00:39:07.850349465Z" level=error msg="Failed to destroy network for sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.850681 env[1196]: time="2025-07-10T00:39:07.850655050Z" level=error msg="encountered an error cleaning up failed sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.850746 env[1196]: time="2025-07-10T00:39:07.850701608Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-c8bcc675-dwv4n,Uid:bd0e32d5-4df5-4eff-bb27-62bde1381e95,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.850917 kubelet[1938]: E0710 00:39:07.850884 1938 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.850917 kubelet[1938]: E0710 00:39:07.850919 1938 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-c8bcc675-dwv4n" Jul 10 00:39:07.851094 kubelet[1938]: E0710 00:39:07.850936 1938 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-c8bcc675-dwv4n" Jul 10 00:39:07.851094 kubelet[1938]: E0710 00:39:07.850964 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-c8bcc675-dwv4n_calico-system(bd0e32d5-4df5-4eff-bb27-62bde1381e95)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-c8bcc675-dwv4n_calico-system(bd0e32d5-4df5-4eff-bb27-62bde1381e95)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-c8bcc675-dwv4n" podUID="bd0e32d5-4df5-4eff-bb27-62bde1381e95" Jul 10 00:39:07.851296 env[1196]: time="2025-07-10T00:39:07.851262764Z" level=error msg="Failed to destroy network for sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.851538 env[1196]: time="2025-07-10T00:39:07.851509048Z" level=error msg="encountered an error cleaning up failed sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.851753 env[1196]: time="2025-07-10T00:39:07.851556346Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-77d569b777-mmjg7,Uid:fdf484de-e1cd-42c7-aa05-0614545158c1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.851834 kubelet[1938]: E0710 00:39:07.851753 1938 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:07.851834 kubelet[1938]: E0710 00:39:07.851814 1938 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-77d569b777-mmjg7" Jul 10 00:39:07.851918 kubelet[1938]: E0710 00:39:07.851832 1938 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-77d569b777-mmjg7" Jul 10 00:39:07.851918 kubelet[1938]: E0710 00:39:07.851882 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-77d569b777-mmjg7_calico-system(fdf484de-e1cd-42c7-aa05-0614545158c1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-77d569b777-mmjg7_calico-system(fdf484de-e1cd-42c7-aa05-0614545158c1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-77d569b777-mmjg7" podUID="fdf484de-e1cd-42c7-aa05-0614545158c1" Jul 10 00:39:08.589359 systemd[1]: Created slice kubepods-besteffort-pode5aa62d9_8cf0_4934_8250_b0d96b853d89.slice. Jul 10 00:39:08.591258 env[1196]: time="2025-07-10T00:39:08.591223377Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zmrl9,Uid:e5aa62d9-8cf0-4934-8250-b0d96b853d89,Namespace:calico-system,Attempt:0,}" Jul 10 00:39:08.643310 env[1196]: time="2025-07-10T00:39:08.643239325Z" level=error msg="Failed to destroy network for sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.643560 env[1196]: time="2025-07-10T00:39:08.643534680Z" level=error msg="encountered an error cleaning up failed sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.643596 env[1196]: time="2025-07-10T00:39:08.643579093Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zmrl9,Uid:e5aa62d9-8cf0-4934-8250-b0d96b853d89,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.643853 kubelet[1938]: E0710 00:39:08.643794 1938 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.643922 kubelet[1938]: E0710 00:39:08.643877 1938 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-zmrl9" Jul 10 00:39:08.643922 kubelet[1938]: E0710 00:39:08.643901 1938 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-zmrl9" Jul 10 00:39:08.643972 kubelet[1938]: E0710 00:39:08.643945 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-zmrl9_calico-system(e5aa62d9-8cf0-4934-8250-b0d96b853d89)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-zmrl9_calico-system(e5aa62d9-8cf0-4934-8250-b0d96b853d89)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-zmrl9" podUID="e5aa62d9-8cf0-4934-8250-b0d96b853d89" Jul 10 00:39:08.645803 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403-shm.mount: Deactivated successfully. Jul 10 00:39:08.656905 kubelet[1938]: I0710 00:39:08.656871 1938 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:08.657476 env[1196]: time="2025-07-10T00:39:08.657436599Z" level=info msg="StopPodSandbox for \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\"" Jul 10 00:39:08.658478 kubelet[1938]: I0710 00:39:08.658420 1938 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:08.659024 env[1196]: time="2025-07-10T00:39:08.658996574Z" level=info msg="StopPodSandbox for \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\"" Jul 10 00:39:08.659881 kubelet[1938]: I0710 00:39:08.659858 1938 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:08.660273 env[1196]: time="2025-07-10T00:39:08.660251526Z" level=info msg="StopPodSandbox for \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\"" Jul 10 00:39:08.661177 kubelet[1938]: I0710 00:39:08.661151 1938 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:08.661818 env[1196]: time="2025-07-10T00:39:08.661796814Z" level=info msg="StopPodSandbox for \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\"" Jul 10 00:39:08.662065 kubelet[1938]: I0710 00:39:08.662037 1938 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:08.662396 env[1196]: time="2025-07-10T00:39:08.662366525Z" level=info msg="StopPodSandbox for \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\"" Jul 10 00:39:08.665351 kubelet[1938]: I0710 00:39:08.665328 1938 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:08.665787 env[1196]: time="2025-07-10T00:39:08.665751184Z" level=info msg="StopPodSandbox for \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\"" Jul 10 00:39:08.682939 kubelet[1938]: I0710 00:39:08.682896 1938 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:08.683864 env[1196]: time="2025-07-10T00:39:08.683818691Z" level=info msg="StopPodSandbox for \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\"" Jul 10 00:39:08.687383 kubelet[1938]: I0710 00:39:08.687356 1938 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:08.688012 env[1196]: time="2025-07-10T00:39:08.687980673Z" level=info msg="StopPodSandbox for \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\"" Jul 10 00:39:08.691490 env[1196]: time="2025-07-10T00:39:08.691426096Z" level=error msg="StopPodSandbox for \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\" failed" error="failed to destroy network for sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.691745 kubelet[1938]: E0710 00:39:08.691693 1938 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:08.691885 kubelet[1938]: E0710 00:39:08.691745 1938 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14"} Jul 10 00:39:08.691885 kubelet[1938]: E0710 00:39:08.691807 1938 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dcbc48e0-8448-4980-ac86-8660732ecd60\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:39:08.691885 kubelet[1938]: E0710 00:39:08.691830 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dcbc48e0-8448-4980-ac86-8660732ecd60\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cd7f67fb4-8bxgr" podUID="dcbc48e0-8448-4980-ac86-8660732ecd60" Jul 10 00:39:08.720641 env[1196]: time="2025-07-10T00:39:08.720557643Z" level=error msg="StopPodSandbox for \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\" failed" error="failed to destroy network for sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.720924 kubelet[1938]: E0710 00:39:08.720873 1938 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:08.721031 kubelet[1938]: E0710 00:39:08.720943 1938 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91"} Jul 10 00:39:08.721031 kubelet[1938]: E0710 00:39:08.720991 1938 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"fdf484de-e1cd-42c7-aa05-0614545158c1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:39:08.721159 kubelet[1938]: E0710 00:39:08.721036 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"fdf484de-e1cd-42c7-aa05-0614545158c1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-77d569b777-mmjg7" podUID="fdf484de-e1cd-42c7-aa05-0614545158c1" Jul 10 00:39:08.721239 env[1196]: time="2025-07-10T00:39:08.721149776Z" level=error msg="StopPodSandbox for \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\" failed" error="failed to destroy network for sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.721473 kubelet[1938]: E0710 00:39:08.721417 1938 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:08.721555 kubelet[1938]: E0710 00:39:08.721490 1938 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb"} Jul 10 00:39:08.721555 kubelet[1938]: E0710 00:39:08.721537 1938 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f8f65afc-561e-4d28-b1a1-4952487d5e88\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:39:08.721668 kubelet[1938]: E0710 00:39:08.721569 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f8f65afc-561e-4d28-b1a1-4952487d5e88\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-jqbfq" podUID="f8f65afc-561e-4d28-b1a1-4952487d5e88" Jul 10 00:39:08.740406 env[1196]: time="2025-07-10T00:39:08.740328034Z" level=error msg="StopPodSandbox for \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\" failed" error="failed to destroy network for sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.741070 kubelet[1938]: E0710 00:39:08.740835 1938 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:08.741070 kubelet[1938]: E0710 00:39:08.740917 1938 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838"} Jul 10 00:39:08.741070 kubelet[1938]: E0710 00:39:08.740993 1938 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c0b395d4-9441-4e9b-8858-23c201917aba\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:39:08.741070 kubelet[1938]: E0710 00:39:08.741020 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c0b395d4-9441-4e9b-8858-23c201917aba\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5cd7f67fb4-k4g4b" podUID="c0b395d4-9441-4e9b-8858-23c201917aba" Jul 10 00:39:08.743520 env[1196]: time="2025-07-10T00:39:08.743473422Z" level=error msg="StopPodSandbox for \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\" failed" error="failed to destroy network for sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.743691 kubelet[1938]: E0710 00:39:08.743656 1938 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:08.743691 kubelet[1938]: E0710 00:39:08.743699 1938 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403"} Jul 10 00:39:08.743780 kubelet[1938]: E0710 00:39:08.743731 1938 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e5aa62d9-8cf0-4934-8250-b0d96b853d89\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:39:08.743780 kubelet[1938]: E0710 00:39:08.743757 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e5aa62d9-8cf0-4934-8250-b0d96b853d89\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-zmrl9" podUID="e5aa62d9-8cf0-4934-8250-b0d96b853d89" Jul 10 00:39:08.750931 env[1196]: time="2025-07-10T00:39:08.750831688Z" level=error msg="StopPodSandbox for \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\" failed" error="failed to destroy network for sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.751432 kubelet[1938]: E0710 00:39:08.751382 1938 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:08.751503 kubelet[1938]: E0710 00:39:08.751448 1938 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062"} Jul 10 00:39:08.751503 kubelet[1938]: E0710 00:39:08.751493 1938 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:39:08.751608 kubelet[1938]: E0710 00:39:08.751523 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-c8bcc675-dwv4n" podUID="bd0e32d5-4df5-4eff-bb27-62bde1381e95" Jul 10 00:39:08.753420 env[1196]: time="2025-07-10T00:39:08.753376186Z" level=error msg="StopPodSandbox for \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\" failed" error="failed to destroy network for sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.753608 kubelet[1938]: E0710 00:39:08.753578 1938 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:08.753669 kubelet[1938]: E0710 00:39:08.753609 1938 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde"} Jul 10 00:39:08.753669 kubelet[1938]: E0710 00:39:08.753641 1938 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9976c401-4bc0-4c73-b329-4a241a0db49c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:39:08.753813 kubelet[1938]: E0710 00:39:08.753665 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9976c401-4bc0-4c73-b329-4a241a0db49c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-wv28v" podUID="9976c401-4bc0-4c73-b329-4a241a0db49c" Jul 10 00:39:08.758425 env[1196]: time="2025-07-10T00:39:08.758371095Z" level=error msg="StopPodSandbox for \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\" failed" error="failed to destroy network for sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:39:08.758667 kubelet[1938]: E0710 00:39:08.758625 1938 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:08.758745 kubelet[1938]: E0710 00:39:08.758687 1938 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971"} Jul 10 00:39:08.758745 kubelet[1938]: E0710 00:39:08.758724 1938 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3999c732-217c-4b04-9aa6-4feadf6686cd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:39:08.758874 kubelet[1938]: E0710 00:39:08.758749 1938 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3999c732-217c-4b04-9aa6-4feadf6686cd\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-rrm9z" podUID="3999c732-217c-4b04-9aa6-4feadf6686cd" Jul 10 00:39:16.751144 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 10 00:39:16.751270 kernel: audit: type=1130 audit(1752107956.744:992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.42:22-10.0.0.1:52988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:16.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.42:22-10.0.0.1:52988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:16.745479 systemd[1]: Started sshd@7-10.0.0.42:22-10.0.0.1:52988.service. Jul 10 00:39:16.776640 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1045118727.mount: Deactivated successfully. Jul 10 00:39:16.782000 audit[3079]: USER_ACCT pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:16.787718 sshd[3079]: Accepted publickey for core from 10.0.0.1 port 52988 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:16.787938 kernel: audit: type=1101 audit(1752107956.782:993): pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:16.788095 kernel: audit: type=1103 audit(1752107956.786:994): pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:16.786000 audit[3079]: CRED_ACQ pid=3079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:16.788304 sshd[3079]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:16.794365 systemd-logind[1186]: New session 8 of user core. Jul 10 00:39:16.794943 systemd[1]: Started session-8.scope. Jul 10 00:39:16.796762 kernel: audit: type=1006 audit(1752107956.787:995): pid=3079 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 10 00:39:16.787000 audit[3079]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0d195700 a2=3 a3=0 items=0 ppid=1 pid=3079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:16.802368 kernel: audit: type=1300 audit(1752107956.787:995): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd0d195700 a2=3 a3=0 items=0 ppid=1 pid=3079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:16.802429 kernel: audit: type=1327 audit(1752107956.787:995): proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:16.787000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:16.798000 audit[3079]: USER_START pid=3079 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:16.809053 kernel: audit: type=1105 audit(1752107956.798:996): pid=3079 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:16.809094 kernel: audit: type=1103 audit(1752107956.799:997): pid=3081 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:16.799000 audit[3081]: CRED_ACQ pid=3081 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:17.982259 sshd[3079]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:17.982000 audit[3079]: USER_END pid=3079 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:17.984101 systemd[1]: sshd@7-10.0.0.42:22-10.0.0.1:52988.service: Deactivated successfully. Jul 10 00:39:17.984758 systemd[1]: session-8.scope: Deactivated successfully. Jul 10 00:39:17.985229 systemd-logind[1186]: Session 8 logged out. Waiting for processes to exit. Jul 10 00:39:17.985814 systemd-logind[1186]: Removed session 8. Jul 10 00:39:17.982000 audit[3079]: CRED_DISP pid=3079 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:17.990654 env[1196]: time="2025-07-10T00:39:17.990621055Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:17.990956 kernel: audit: type=1106 audit(1752107957.982:998): pid=3079 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:17.990985 kernel: audit: type=1104 audit(1752107957.982:999): pid=3079 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:17.983000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.42:22-10.0.0.1:52988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:18.045268 env[1196]: time="2025-07-10T00:39:18.045226821Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:18.051198 env[1196]: time="2025-07-10T00:39:18.051164168Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:18.053104 env[1196]: time="2025-07-10T00:39:18.053057264Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:18.053623 env[1196]: time="2025-07-10T00:39:18.053589885Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 10 00:39:18.059739 env[1196]: time="2025-07-10T00:39:18.059695117Z" level=info msg="CreateContainer within sandbox \"2cdebf1367c2c06b7ab3bf9be85e8cba6e3822362d709fe0f3e0c7c26abeb6cd\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 10 00:39:18.078984 env[1196]: time="2025-07-10T00:39:18.078919881Z" level=info msg="CreateContainer within sandbox \"2cdebf1367c2c06b7ab3bf9be85e8cba6e3822362d709fe0f3e0c7c26abeb6cd\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"d1f2aca5fe5e6603d7dfbe19f10c0556a465f6ace4bf3c3294cc427b58292afb\"" Jul 10 00:39:18.079532 env[1196]: time="2025-07-10T00:39:18.079485443Z" level=info msg="StartContainer for \"d1f2aca5fe5e6603d7dfbe19f10c0556a465f6ace4bf3c3294cc427b58292afb\"" Jul 10 00:39:18.096517 systemd[1]: Started cri-containerd-d1f2aca5fe5e6603d7dfbe19f10c0556a465f6ace4bf3c3294cc427b58292afb.scope. Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f0fcc414a38 items=0 ppid=2417 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:18.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431663261636135666535653636303364376466626531396631306330 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit: BPF prog-id=136 op=LOAD Jul 10 00:39:18.110000 audit[3102]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003c6148 items=0 ppid=2417 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:18.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431663261636135666535653636303364376466626531396631306330 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit: BPF prog-id=137 op=LOAD Jul 10 00:39:18.110000 audit[3102]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0003c6198 items=0 ppid=2417 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:18.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431663261636135666535653636303364376466626531396631306330 Jul 10 00:39:18.110000 audit: BPF prog-id=137 op=UNLOAD Jul 10 00:39:18.110000 audit: BPF prog-id=136 op=UNLOAD Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { perfmon } for pid=3102 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit[3102]: AVC avc: denied { bpf } for pid=3102 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:18.110000 audit: BPF prog-id=138 op=LOAD Jul 10 00:39:18.110000 audit[3102]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003c6228 items=0 ppid=2417 pid=3102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:18.110000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431663261636135666535653636303364376466626531396631306330 Jul 10 00:39:18.124092 env[1196]: time="2025-07-10T00:39:18.124042577Z" level=info msg="StartContainer for \"d1f2aca5fe5e6603d7dfbe19f10c0556a465f6ace4bf3c3294cc427b58292afb\" returns successfully" Jul 10 00:39:18.205136 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 10 00:39:18.205302 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 10 00:39:18.303233 env[1196]: time="2025-07-10T00:39:18.303101761Z" level=info msg="StopPodSandbox for \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\"" Jul 10 00:39:18.749496 kubelet[1938]: I0710 00:39:18.749414 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-mq88f" podStartSLOduration=2.155679075 podStartE2EDuration="22.749392115s" podCreationTimestamp="2025-07-10 00:38:56 +0000 UTC" firstStartedPulling="2025-07-10 00:38:57.460694963 +0000 UTC m=+20.954321239" lastFinishedPulling="2025-07-10 00:39:18.054408003 +0000 UTC m=+41.548034279" observedRunningTime="2025-07-10 00:39:18.749226885 +0000 UTC m=+42.242853161" watchObservedRunningTime="2025-07-10 00:39:18.749392115 +0000 UTC m=+42.243018391" Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.388 [INFO][3159] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.389 [INFO][3159] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" iface="eth0" netns="/var/run/netns/cni-e8688776-4fc3-1223-8226-a54acab50bf1" Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.389 [INFO][3159] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" iface="eth0" netns="/var/run/netns/cni-e8688776-4fc3-1223-8226-a54acab50bf1" Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.390 [INFO][3159] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" iface="eth0" netns="/var/run/netns/cni-e8688776-4fc3-1223-8226-a54acab50bf1" Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.390 [INFO][3159] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.390 [INFO][3159] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.740 [INFO][3169] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" HandleID="k8s-pod-network.efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Workload="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.741 [INFO][3169] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.741 [INFO][3169] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.750 [WARNING][3169] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" HandleID="k8s-pod-network.efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Workload="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.750 [INFO][3169] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" HandleID="k8s-pod-network.efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Workload="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.751 [INFO][3169] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:18.755071 env[1196]: 2025-07-10 00:39:18.753 [INFO][3159] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:18.755463 env[1196]: time="2025-07-10T00:39:18.755250324Z" level=info msg="TearDown network for sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\" successfully" Jul 10 00:39:18.755463 env[1196]: time="2025-07-10T00:39:18.755283005Z" level=info msg="StopPodSandbox for \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\" returns successfully" Jul 10 00:39:18.902223 kubelet[1938]: I0710 00:39:18.902167 1938 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/bd0e32d5-4df5-4eff-bb27-62bde1381e95-whisker-backend-key-pair\") pod \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\" (UID: \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\") " Jul 10 00:39:18.902223 kubelet[1938]: I0710 00:39:18.902220 1938 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bd0e32d5-4df5-4eff-bb27-62bde1381e95-whisker-ca-bundle\") pod \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\" (UID: \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\") " Jul 10 00:39:18.902407 kubelet[1938]: I0710 00:39:18.902235 1938 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-7tqch\" (UniqueName: \"kubernetes.io/projected/bd0e32d5-4df5-4eff-bb27-62bde1381e95-kube-api-access-7tqch\") pod \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\" (UID: \"bd0e32d5-4df5-4eff-bb27-62bde1381e95\") " Jul 10 00:39:18.903081 kubelet[1938]: I0710 00:39:18.902881 1938 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/bd0e32d5-4df5-4eff-bb27-62bde1381e95-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "bd0e32d5-4df5-4eff-bb27-62bde1381e95" (UID: "bd0e32d5-4df5-4eff-bb27-62bde1381e95"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 10 00:39:18.905056 kubelet[1938]: I0710 00:39:18.905030 1938 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/bd0e32d5-4df5-4eff-bb27-62bde1381e95-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "bd0e32d5-4df5-4eff-bb27-62bde1381e95" (UID: "bd0e32d5-4df5-4eff-bb27-62bde1381e95"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 10 00:39:18.905128 kubelet[1938]: I0710 00:39:18.905049 1938 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bd0e32d5-4df5-4eff-bb27-62bde1381e95-kube-api-access-7tqch" (OuterVolumeSpecName: "kube-api-access-7tqch") pod "bd0e32d5-4df5-4eff-bb27-62bde1381e95" (UID: "bd0e32d5-4df5-4eff-bb27-62bde1381e95"). InnerVolumeSpecName "kube-api-access-7tqch". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 10 00:39:19.003540 kubelet[1938]: I0710 00:39:19.003457 1938 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/bd0e32d5-4df5-4eff-bb27-62bde1381e95-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 10 00:39:19.003540 kubelet[1938]: I0710 00:39:19.003484 1938 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-7tqch\" (UniqueName: \"kubernetes.io/projected/bd0e32d5-4df5-4eff-bb27-62bde1381e95-kube-api-access-7tqch\") on node \"localhost\" DevicePath \"\"" Jul 10 00:39:19.003540 kubelet[1938]: I0710 00:39:19.003492 1938 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/bd0e32d5-4df5-4eff-bb27-62bde1381e95-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 10 00:39:19.058807 systemd[1]: run-netns-cni\x2de8688776\x2d4fc3\x2d1223\x2d8226\x2da54acab50bf1.mount: Deactivated successfully. Jul 10 00:39:19.058920 systemd[1]: var-lib-kubelet-pods-bd0e32d5\x2d4df5\x2d4eff\x2dbb27\x2d62bde1381e95-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d7tqch.mount: Deactivated successfully. Jul 10 00:39:19.058991 systemd[1]: var-lib-kubelet-pods-bd0e32d5\x2d4df5\x2d4eff\x2dbb27\x2d62bde1381e95-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 10 00:39:19.585191 env[1196]: time="2025-07-10T00:39:19.585119159Z" level=info msg="StopPodSandbox for \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\"" Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.623 [INFO][3223] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.624 [INFO][3223] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" iface="eth0" netns="/var/run/netns/cni-3c3832f9-fe66-b41c-0187-101dafb47d04" Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.624 [INFO][3223] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" iface="eth0" netns="/var/run/netns/cni-3c3832f9-fe66-b41c-0187-101dafb47d04" Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.624 [INFO][3223] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" iface="eth0" netns="/var/run/netns/cni-3c3832f9-fe66-b41c-0187-101dafb47d04" Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.624 [INFO][3223] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.624 [INFO][3223] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.648 [INFO][3232] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" HandleID="k8s-pod-network.b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.648 [INFO][3232] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.648 [INFO][3232] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.655 [WARNING][3232] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" HandleID="k8s-pod-network.b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.655 [INFO][3232] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" HandleID="k8s-pod-network.b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.656 [INFO][3232] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:19.660306 env[1196]: 2025-07-10 00:39:19.658 [INFO][3223] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:19.663071 systemd[1]: run-netns-cni\x2d3c3832f9\x2dfe66\x2db41c\x2d0187\x2d101dafb47d04.mount: Deactivated successfully. Jul 10 00:39:19.663374 env[1196]: time="2025-07-10T00:39:19.663311568Z" level=info msg="TearDown network for sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\" successfully" Jul 10 00:39:19.663374 env[1196]: time="2025-07-10T00:39:19.663367494Z" level=info msg="StopPodSandbox for \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\" returns successfully" Jul 10 00:39:19.664164 env[1196]: time="2025-07-10T00:39:19.664129807Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-wv28v,Uid:9976c401-4bc0-4c73-b329-4a241a0db49c,Namespace:calico-system,Attempt:1,}" Jul 10 00:39:19.713706 systemd[1]: Removed slice kubepods-besteffort-podbd0e32d5_4df5_4eff_bb27_62bde1381e95.slice. Jul 10 00:39:19.813000 audit[3323]: AVC avc: denied { write } for pid=3323 comm="tee" name="fd" dev="proc" ino=25670 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:39:19.813000 audit[3323]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc89d467de a2=241 a3=1b6 items=1 ppid=3299 pid=3323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.813000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 10 00:39:19.813000 audit: PATH item=0 name="/dev/fd/63" inode=24696 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:39:19.813000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:39:19.829456 systemd[1]: Created slice kubepods-besteffort-pod7696038e_58d7_450b_8a7e_67f1bed81062.slice. Jul 10 00:39:19.837000 audit[3339]: AVC avc: denied { write } for pid=3339 comm="tee" name="fd" dev="proc" ino=25676 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:39:19.837000 audit[3339]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff252577ed a2=241 a3=1b6 items=1 ppid=3296 pid=3339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.837000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 10 00:39:19.837000 audit: PATH item=0 name="/dev/fd/63" inode=24701 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:39:19.837000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:39:19.849000 audit[3354]: AVC avc: denied { write } for pid=3354 comm="tee" name="fd" dev="proc" ino=24729 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:39:19.849000 audit[3354]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff999a67ef a2=241 a3=1b6 items=1 ppid=3311 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.849000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 10 00:39:19.849000 audit: PATH item=0 name="/dev/fd/63" inode=24717 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:39:19.849000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:39:19.850000 audit[3342]: AVC avc: denied { write } for pid=3342 comm="tee" name="fd" dev="proc" ino=24733 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:39:19.850000 audit[3342]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffeef3df7ee a2=241 a3=1b6 items=1 ppid=3293 pid=3342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.850000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 10 00:39:19.850000 audit: PATH item=0 name="/dev/fd/63" inode=24706 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:39:19.850000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:39:19.859000 audit[3352]: AVC avc: denied { write } for pid=3352 comm="tee" name="fd" dev="proc" ino=24740 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:39:19.859000 audit[3352]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc8198c7ed a2=241 a3=1b6 items=1 ppid=3294 pid=3352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.859000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 10 00:39:19.859000 audit: PATH item=0 name="/dev/fd/63" inode=24714 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:39:19.859000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:39:19.860000 audit[3359]: AVC avc: denied { write } for pid=3359 comm="tee" name="fd" dev="proc" ino=24744 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:39:19.860000 audit[3359]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff825c17ed a2=241 a3=1b6 items=1 ppid=3307 pid=3359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.860000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 10 00:39:19.860000 audit: PATH item=0 name="/dev/fd/63" inode=24726 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:39:19.860000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:39:19.869000 audit[3369]: AVC avc: denied { write } for pid=3369 comm="tee" name="fd" dev="proc" ino=24754 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:39:19.869000 audit[3369]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff806707dd a2=241 a3=1b6 items=1 ppid=3320 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.869000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 10 00:39:19.869000 audit: PATH item=0 name="/dev/fd/63" inode=24737 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:39:19.869000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:39:19.894528 systemd-networkd[1025]: cali4f45c9df2ba: Link UP Jul 10 00:39:19.898873 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:39:19.898925 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4f45c9df2ba: link becomes ready Jul 10 00:39:19.898447 systemd-networkd[1025]: cali4f45c9df2ba: Gained carrier Jul 10 00:39:19.910809 kubelet[1938]: I0710 00:39:19.910354 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/7696038e-58d7-450b-8a7e-67f1bed81062-whisker-backend-key-pair\") pod \"whisker-66bc86d877-trf56\" (UID: \"7696038e-58d7-450b-8a7e-67f1bed81062\") " pod="calico-system/whisker-66bc86d877-trf56" Jul 10 00:39:19.910809 kubelet[1938]: I0710 00:39:19.910416 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7696038e-58d7-450b-8a7e-67f1bed81062-whisker-ca-bundle\") pod \"whisker-66bc86d877-trf56\" (UID: \"7696038e-58d7-450b-8a7e-67f1bed81062\") " pod="calico-system/whisker-66bc86d877-trf56" Jul 10 00:39:19.910809 kubelet[1938]: I0710 00:39:19.910431 1938 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kzblm\" (UniqueName: \"kubernetes.io/projected/7696038e-58d7-450b-8a7e-67f1bed81062-kube-api-access-kzblm\") pod \"whisker-66bc86d877-trf56\" (UID: \"7696038e-58d7-450b-8a7e-67f1bed81062\") " pod="calico-system/whisker-66bc86d877-trf56" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.698 [INFO][3239] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.713 [INFO][3239] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--wv28v-eth0 goldmane-58fd7646b9- calico-system 9976c401-4bc0-4c73-b329-4a241a0db49c 993 0 2025-07-10 00:38:56 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-wv28v eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali4f45c9df2ba [] [] }} ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Namespace="calico-system" Pod="goldmane-58fd7646b9-wv28v" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wv28v-" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.713 [INFO][3239] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Namespace="calico-system" Pod="goldmane-58fd7646b9-wv28v" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.749 [INFO][3261] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" HandleID="k8s-pod-network.879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.750 [INFO][3261] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" HandleID="k8s-pod-network.879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004e230), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-wv28v", "timestamp":"2025-07-10 00:39:19.749568551 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.750 [INFO][3261] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.750 [INFO][3261] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.750 [INFO][3261] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.795 [INFO][3261] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" host="localhost" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.820 [INFO][3261] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.835 [INFO][3261] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.837 [INFO][3261] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.847 [INFO][3261] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.847 [INFO][3261] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" host="localhost" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.851 [INFO][3261] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5 Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.855 [INFO][3261] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" host="localhost" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.863 [INFO][3261] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" host="localhost" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.863 [INFO][3261] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" host="localhost" Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.863 [INFO][3261] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:19.914963 env[1196]: 2025-07-10 00:39:19.863 [INFO][3261] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" HandleID="k8s-pod-network.879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:19.915743 env[1196]: 2025-07-10 00:39:19.865 [INFO][3239] cni-plugin/k8s.go 418: Populated endpoint ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Namespace="calico-system" Pod="goldmane-58fd7646b9-wv28v" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--wv28v-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"9976c401-4bc0-4c73-b329-4a241a0db49c", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-wv28v", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali4f45c9df2ba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:19.915743 env[1196]: 2025-07-10 00:39:19.865 [INFO][3239] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Namespace="calico-system" Pod="goldmane-58fd7646b9-wv28v" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:19.915743 env[1196]: 2025-07-10 00:39:19.865 [INFO][3239] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4f45c9df2ba ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Namespace="calico-system" Pod="goldmane-58fd7646b9-wv28v" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:19.915743 env[1196]: 2025-07-10 00:39:19.894 [INFO][3239] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Namespace="calico-system" Pod="goldmane-58fd7646b9-wv28v" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:19.915743 env[1196]: 2025-07-10 00:39:19.895 [INFO][3239] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Namespace="calico-system" Pod="goldmane-58fd7646b9-wv28v" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--wv28v-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"9976c401-4bc0-4c73-b329-4a241a0db49c", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5", Pod:"goldmane-58fd7646b9-wv28v", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali4f45c9df2ba", MAC:"3e:71:e9:13:96:6a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:19.915743 env[1196]: 2025-07-10 00:39:19.908 [INFO][3239] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5" Namespace="calico-system" Pod="goldmane-58fd7646b9-wv28v" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:19.929547 env[1196]: time="2025-07-10T00:39:19.929477789Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:39:19.929547 env[1196]: time="2025-07-10T00:39:19.929518656Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:39:19.929547 env[1196]: time="2025-07-10T00:39:19.929530148Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:39:19.930087 env[1196]: time="2025-07-10T00:39:19.929709404Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5 pid=3396 runtime=io.containerd.runc.v2 Jul 10 00:39:19.942233 systemd[1]: Started cri-containerd-879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5.scope. Jul 10 00:39:19.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.965000 audit: BPF prog-id=139 op=LOAD Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3396 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837396161616438626162643531393135306636613737353863373961 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=3396 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837396161616438626162643531393135306636613737353863373961 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit: BPF prog-id=140 op=LOAD Jul 10 00:39:19.966000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000285620 items=0 ppid=3396 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837396161616438626162643531393135306636613737353863373961 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.966000 audit: BPF prog-id=141 op=LOAD Jul 10 00:39:19.966000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000285668 items=0 ppid=3396 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837396161616438626162643531393135306636613737353863373961 Jul 10 00:39:19.967000 audit: BPF prog-id=141 op=UNLOAD Jul 10 00:39:19.967000 audit: BPF prog-id=140 op=UNLOAD Jul 10 00:39:19.967000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.967000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.967000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.967000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.967000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.967000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.967000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.967000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.967000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.967000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:19.967000 audit: BPF prog-id=142 op=LOAD Jul 10 00:39:19.967000 audit[3407]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000285a78 items=0 ppid=3396 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:19.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837396161616438626162643531393135306636613737353863373961 Jul 10 00:39:19.968629 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:39:19.993723 env[1196]: time="2025-07-10T00:39:19.993681297Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-wv28v,Uid:9976c401-4bc0-4c73-b329-4a241a0db49c,Namespace:calico-system,Attempt:1,} returns sandbox id \"879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5\"" Jul 10 00:39:19.995157 env[1196]: time="2025-07-10T00:39:19.995126783Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 10 00:39:20.040000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.040000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.040000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.040000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.040000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.040000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.040000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.040000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.040000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.040000 audit: BPF prog-id=143 op=LOAD Jul 10 00:39:20.040000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2eebd690 a2=98 a3=1fffffffffffffff items=0 ppid=3309 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.040000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:39:20.041000 audit: BPF prog-id=143 op=UNLOAD Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit: BPF prog-id=144 op=LOAD Jul 10 00:39:20.041000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2eebd570 a2=94 a3=3 items=0 ppid=3309 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.041000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:39:20.041000 audit: BPF prog-id=144 op=UNLOAD Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { bpf } for pid=3461 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit: BPF prog-id=145 op=LOAD Jul 10 00:39:20.041000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff2eebd5b0 a2=94 a3=7fff2eebd790 items=0 ppid=3309 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.041000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:39:20.041000 audit: BPF prog-id=145 op=UNLOAD Jul 10 00:39:20.041000 audit[3461]: AVC avc: denied { perfmon } for pid=3461 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.041000 audit[3461]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7fff2eebd680 a2=50 a3=a000000085 items=0 ppid=3309 pid=3461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.041000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit: BPF prog-id=146 op=LOAD Jul 10 00:39:20.043000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffebe085090 a2=98 a3=3 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.043000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.043000 audit: BPF prog-id=146 op=UNLOAD Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit: BPF prog-id=147 op=LOAD Jul 10 00:39:20.043000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffebe084e80 a2=94 a3=54428f items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.043000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.043000 audit: BPF prog-id=147 op=UNLOAD Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.043000 audit: BPF prog-id=148 op=LOAD Jul 10 00:39:20.043000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffebe084eb0 a2=94 a3=2 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.043000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.043000 audit: BPF prog-id=148 op=UNLOAD Jul 10 00:39:20.060959 systemd[1]: run-containerd-runc-k8s.io-d1f2aca5fe5e6603d7dfbe19f10c0556a465f6ace4bf3c3294cc427b58292afb-runc.uS3DSN.mount: Deactivated successfully. Jul 10 00:39:20.133381 env[1196]: time="2025-07-10T00:39:20.133258475Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-66bc86d877-trf56,Uid:7696038e-58d7-450b-8a7e-67f1bed81062,Namespace:calico-system,Attempt:0,}" Jul 10 00:39:20.146000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.146000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.146000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.146000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.146000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.146000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.146000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.146000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.146000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.146000 audit: BPF prog-id=149 op=LOAD Jul 10 00:39:20.146000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffebe084d70 a2=94 a3=1 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.146000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.146000 audit: BPF prog-id=149 op=UNLOAD Jul 10 00:39:20.146000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.146000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffebe084e40 a2=50 a3=7ffebe084f20 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.146000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebe084d80 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffebe084db0 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffebe084cc0 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebe084dd0 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebe084db0 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebe084da0 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebe084dd0 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffebe084db0 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffebe084dd0 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffebe084da0 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.154000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.154000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffebe084e10 a2=28 a3=0 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.154000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffebe084bc0 a2=50 a3=1 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.155000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit: BPF prog-id=150 op=LOAD Jul 10 00:39:20.155000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffebe084bc0 a2=94 a3=5 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.155000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.155000 audit: BPF prog-id=150 op=UNLOAD Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffebe084c70 a2=50 a3=1 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.155000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffebe084d90 a2=4 a3=38 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.155000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.155000 audit[3462]: AVC avc: denied { confidentiality } for pid=3462 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:39:20.155000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffebe084de0 a2=94 a3=6 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.155000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { confidentiality } for pid=3462 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:39:20.156000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffebe084590 a2=94 a3=88 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.156000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { perfmon } for pid=3462 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { bpf } for pid=3462 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.156000 audit[3462]: AVC avc: denied { confidentiality } for pid=3462 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:39:20.156000 audit[3462]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffebe084590 a2=94 a3=88 items=0 ppid=3309 pid=3462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.156000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit: BPF prog-id=151 op=LOAD Jul 10 00:39:20.164000 audit[3478]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd76707d00 a2=98 a3=1999999999999999 items=0 ppid=3309 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.164000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:39:20.164000 audit: BPF prog-id=151 op=UNLOAD Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit: BPF prog-id=152 op=LOAD Jul 10 00:39:20.164000 audit[3478]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd76707be0 a2=94 a3=ffff items=0 ppid=3309 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.164000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:39:20.164000 audit: BPF prog-id=152 op=UNLOAD Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { perfmon } for pid=3478 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit[3478]: AVC avc: denied { bpf } for pid=3478 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.164000 audit: BPF prog-id=153 op=LOAD Jul 10 00:39:20.164000 audit[3478]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd76707c20 a2=94 a3=7ffd76707e00 items=0 ppid=3309 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.164000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:39:20.164000 audit: BPF prog-id=153 op=UNLOAD Jul 10 00:39:20.216554 systemd-networkd[1025]: vxlan.calico: Link UP Jul 10 00:39:20.216561 systemd-networkd[1025]: vxlan.calico: Gained carrier Jul 10 00:39:20.230000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.230000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.230000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.230000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.230000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.230000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.230000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.230000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.230000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.230000 audit: BPF prog-id=154 op=LOAD Jul 10 00:39:20.230000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcac808e00 a2=98 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.230000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit: BPF prog-id=154 op=UNLOAD Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit: BPF prog-id=155 op=LOAD Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcac808c10 a2=94 a3=54428f items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit: BPF prog-id=155 op=UNLOAD Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit: BPF prog-id=156 op=LOAD Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcac808c40 a2=94 a3=2 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit: BPF prog-id=156 op=UNLOAD Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcac808b10 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcac808b40 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcac808a50 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcac808b60 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcac808b40 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcac808b30 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcac808b60 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcac808b40 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcac808b60 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcac808b30 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffcac808ba0 a2=28 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.234000 audit: BPF prog-id=157 op=LOAD Jul 10 00:39:20.234000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcac808a10 a2=94 a3=0 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.234000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.234000 audit: BPF prog-id=157 op=UNLOAD Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffcac808a00 a2=50 a3=2800 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.235000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffcac808a00 a2=50 a3=2800 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.235000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit: BPF prog-id=158 op=LOAD Jul 10 00:39:20.235000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcac808220 a2=94 a3=2 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.235000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.235000 audit: BPF prog-id=158 op=UNLOAD Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { perfmon } for pid=3512 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit[3512]: AVC avc: denied { bpf } for pid=3512 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.235000 audit: BPF prog-id=159 op=LOAD Jul 10 00:39:20.235000 audit[3512]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcac808320 a2=94 a3=30 items=0 ppid=3309 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.235000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit: BPF prog-id=160 op=LOAD Jul 10 00:39:20.239000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdce17fc50 a2=98 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.239000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.239000 audit: BPF prog-id=160 op=UNLOAD Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit: BPF prog-id=161 op=LOAD Jul 10 00:39:20.239000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdce17fa40 a2=94 a3=54428f items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.239000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.239000 audit: BPF prog-id=161 op=UNLOAD Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.239000 audit: BPF prog-id=162 op=LOAD Jul 10 00:39:20.239000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdce17fa70 a2=94 a3=2 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.239000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.239000 audit: BPF prog-id=162 op=UNLOAD Jul 10 00:39:20.257288 systemd-networkd[1025]: caliae5a33f94a2: Link UP Jul 10 00:39:20.258694 systemd-networkd[1025]: caliae5a33f94a2: Gained carrier Jul 10 00:39:20.258990 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliae5a33f94a2: link becomes ready Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.182 [INFO][3464] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--66bc86d877--trf56-eth0 whisker-66bc86d877- calico-system 7696038e-58d7-450b-8a7e-67f1bed81062 1008 0 2025-07-10 00:39:19 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:66bc86d877 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-66bc86d877-trf56 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] caliae5a33f94a2 [] [] }} ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Namespace="calico-system" Pod="whisker-66bc86d877-trf56" WorkloadEndpoint="localhost-k8s-whisker--66bc86d877--trf56-" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.182 [INFO][3464] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Namespace="calico-system" Pod="whisker-66bc86d877-trf56" WorkloadEndpoint="localhost-k8s-whisker--66bc86d877--trf56-eth0" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.214 [INFO][3491] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" HandleID="k8s-pod-network.34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Workload="localhost-k8s-whisker--66bc86d877--trf56-eth0" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.214 [INFO][3491] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" HandleID="k8s-pod-network.34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Workload="localhost-k8s-whisker--66bc86d877--trf56-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003552a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-66bc86d877-trf56", "timestamp":"2025-07-10 00:39:20.21442546 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.214 [INFO][3491] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.214 [INFO][3491] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.214 [INFO][3491] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.226 [INFO][3491] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" host="localhost" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.230 [INFO][3491] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.233 [INFO][3491] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.234 [INFO][3491] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.239 [INFO][3491] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.240 [INFO][3491] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" host="localhost" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.243 [INFO][3491] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.248 [INFO][3491] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" host="localhost" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.254 [INFO][3491] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" host="localhost" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.254 [INFO][3491] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" host="localhost" Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.254 [INFO][3491] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:20.270797 env[1196]: 2025-07-10 00:39:20.254 [INFO][3491] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" HandleID="k8s-pod-network.34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Workload="localhost-k8s-whisker--66bc86d877--trf56-eth0" Jul 10 00:39:20.271420 env[1196]: 2025-07-10 00:39:20.256 [INFO][3464] cni-plugin/k8s.go 418: Populated endpoint ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Namespace="calico-system" Pod="whisker-66bc86d877-trf56" WorkloadEndpoint="localhost-k8s-whisker--66bc86d877--trf56-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--66bc86d877--trf56-eth0", GenerateName:"whisker-66bc86d877-", Namespace:"calico-system", SelfLink:"", UID:"7696038e-58d7-450b-8a7e-67f1bed81062", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 39, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"66bc86d877", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-66bc86d877-trf56", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"caliae5a33f94a2", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:20.271420 env[1196]: 2025-07-10 00:39:20.256 [INFO][3464] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Namespace="calico-system" Pod="whisker-66bc86d877-trf56" WorkloadEndpoint="localhost-k8s-whisker--66bc86d877--trf56-eth0" Jul 10 00:39:20.271420 env[1196]: 2025-07-10 00:39:20.256 [INFO][3464] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliae5a33f94a2 ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Namespace="calico-system" Pod="whisker-66bc86d877-trf56" WorkloadEndpoint="localhost-k8s-whisker--66bc86d877--trf56-eth0" Jul 10 00:39:20.271420 env[1196]: 2025-07-10 00:39:20.258 [INFO][3464] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Namespace="calico-system" Pod="whisker-66bc86d877-trf56" WorkloadEndpoint="localhost-k8s-whisker--66bc86d877--trf56-eth0" Jul 10 00:39:20.271420 env[1196]: 2025-07-10 00:39:20.259 [INFO][3464] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Namespace="calico-system" Pod="whisker-66bc86d877-trf56" WorkloadEndpoint="localhost-k8s-whisker--66bc86d877--trf56-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--66bc86d877--trf56-eth0", GenerateName:"whisker-66bc86d877-", Namespace:"calico-system", SelfLink:"", UID:"7696038e-58d7-450b-8a7e-67f1bed81062", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 39, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"66bc86d877", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c", Pod:"whisker-66bc86d877-trf56", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"caliae5a33f94a2", MAC:"a6:c6:64:2f:81:dd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:20.271420 env[1196]: 2025-07-10 00:39:20.269 [INFO][3464] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c" Namespace="calico-system" Pod="whisker-66bc86d877-trf56" WorkloadEndpoint="localhost-k8s-whisker--66bc86d877--trf56-eth0" Jul 10 00:39:20.290133 env[1196]: time="2025-07-10T00:39:20.290034463Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:39:20.290133 env[1196]: time="2025-07-10T00:39:20.290082563Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:39:20.290133 env[1196]: time="2025-07-10T00:39:20.290093384Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:39:20.290432 env[1196]: time="2025-07-10T00:39:20.290265438Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c pid=3539 runtime=io.containerd.runc.v2 Jul 10 00:39:20.305700 systemd[1]: Started cri-containerd-34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c.scope. Jul 10 00:39:20.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit: BPF prog-id=163 op=LOAD Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3539 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334313835626335343564376565353161356363353062323933313261 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3539 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334313835626335343564376565353161356363353062323933313261 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.319000 audit: BPF prog-id=164 op=LOAD Jul 10 00:39:20.319000 audit[3548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002298c0 items=0 ppid=3539 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334313835626335343564376565353161356363353062323933313261 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit: BPF prog-id=165 op=LOAD Jul 10 00:39:20.320000 audit[3548]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000229908 items=0 ppid=3539 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334313835626335343564376565353161356363353062323933313261 Jul 10 00:39:20.320000 audit: BPF prog-id=165 op=UNLOAD Jul 10 00:39:20.320000 audit: BPF prog-id=164 op=UNLOAD Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.320000 audit: BPF prog-id=166 op=LOAD Jul 10 00:39:20.320000 audit[3548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000229d18 items=0 ppid=3539 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334313835626335343564376565353161356363353062323933313261 Jul 10 00:39:20.321868 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:39:20.344226 env[1196]: time="2025-07-10T00:39:20.344179152Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-66bc86d877-trf56,Uid:7696038e-58d7-450b-8a7e-67f1bed81062,Namespace:calico-system,Attempt:0,} returns sandbox id \"34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c\"" Jul 10 00:39:20.372000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.372000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.372000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.372000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.372000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.372000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.372000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.372000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.372000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.372000 audit: BPF prog-id=167 op=LOAD Jul 10 00:39:20.372000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdce17f930 a2=94 a3=1 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.372000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.372000 audit: BPF prog-id=167 op=UNLOAD Jul 10 00:39:20.372000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.372000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffdce17fa00 a2=50 a3=7ffdce17fae0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.372000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdce17f940 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdce17f970 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdce17f880 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdce17f990 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdce17f970 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdce17f960 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdce17f990 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdce17f970 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdce17f990 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdce17f960 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.381000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.381000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdce17f9d0 a2=28 a3=0 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.381000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdce17f780 a2=50 a3=1 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.382000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit: BPF prog-id=168 op=LOAD Jul 10 00:39:20.382000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdce17f780 a2=94 a3=5 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.382000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.382000 audit: BPF prog-id=168 op=UNLOAD Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdce17f830 a2=50 a3=1 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.382000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffdce17f950 a2=4 a3=38 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.382000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { confidentiality } for pid=3516 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:39:20.382000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdce17f9a0 a2=94 a3=6 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.382000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { confidentiality } for pid=3516 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:39:20.382000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdce17f150 a2=94 a3=88 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.382000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { perfmon } for pid=3516 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { confidentiality } for pid=3516 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:39:20.382000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdce17f150 a2=94 a3=88 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.382000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.382000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.382000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdce180b80 a2=10 a3=208 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.382000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.383000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.383000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdce180a20 a2=10 a3=3 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.383000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.383000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdce1809c0 a2=10 a3=3 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.383000 audit[3516]: AVC avc: denied { bpf } for pid=3516 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.383000 audit[3516]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffdce1809c0 a2=10 a3=7 items=0 ppid=3309 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.383000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:39:20.391000 audit: BPF prog-id=159 op=UNLOAD Jul 10 00:39:20.433000 audit[3592]: NETFILTER_CFG table=mangle:103 family=2 entries=16 op=nft_register_chain pid=3592 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:20.433000 audit[3592]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffcfde20a10 a2=0 a3=7ffcfde209fc items=0 ppid=3309 pid=3592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.433000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:20.439000 audit[3593]: NETFILTER_CFG table=nat:104 family=2 entries=15 op=nft_register_chain pid=3593 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:20.439000 audit[3593]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffcd6a49b20 a2=0 a3=7ffcd6a49b0c items=0 ppid=3309 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.439000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:20.449000 audit[3596]: NETFILTER_CFG table=raw:105 family=2 entries=21 op=nft_register_chain pid=3596 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:20.449000 audit[3596]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffe1b66b9a0 a2=0 a3=7ffe1b66b98c items=0 ppid=3309 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.449000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:20.449000 audit[3594]: NETFILTER_CFG table=filter:106 family=2 entries=81 op=nft_register_chain pid=3594 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:20.449000 audit[3594]: SYSCALL arch=c000003e syscall=46 success=yes exit=44224 a0=3 a1=7ffeafc07960 a2=0 a3=55686249e000 items=0 ppid=3309 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.449000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:20.477000 audit[3608]: NETFILTER_CFG table=filter:107 family=2 entries=57 op=nft_register_chain pid=3608 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:20.477000 audit[3608]: SYSCALL arch=c000003e syscall=46 success=yes exit=34072 a0=3 a1=7fff399ac570 a2=0 a3=7fff399ac55c items=0 ppid=3309 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.477000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:20.586718 env[1196]: time="2025-07-10T00:39:20.586057839Z" level=info msg="StopPodSandbox for \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\"" Jul 10 00:39:20.588421 kubelet[1938]: I0710 00:39:20.588243 1938 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="bd0e32d5-4df5-4eff-bb27-62bde1381e95" path="/var/lib/kubelet/pods/bd0e32d5-4df5-4eff-bb27-62bde1381e95/volumes" Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.626 [INFO][3620] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.626 [INFO][3620] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" iface="eth0" netns="/var/run/netns/cni-6c6118eb-a0af-5aeb-8d30-bf1e44f843a1" Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.626 [INFO][3620] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" iface="eth0" netns="/var/run/netns/cni-6c6118eb-a0af-5aeb-8d30-bf1e44f843a1" Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.626 [INFO][3620] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" iface="eth0" netns="/var/run/netns/cni-6c6118eb-a0af-5aeb-8d30-bf1e44f843a1" Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.626 [INFO][3620] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.626 [INFO][3620] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.647 [INFO][3629] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" HandleID="k8s-pod-network.80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.647 [INFO][3629] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.647 [INFO][3629] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.652 [WARNING][3629] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" HandleID="k8s-pod-network.80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.652 [INFO][3629] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" HandleID="k8s-pod-network.80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.654 [INFO][3629] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:20.657679 env[1196]: 2025-07-10 00:39:20.656 [INFO][3620] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:20.658168 env[1196]: time="2025-07-10T00:39:20.657752769Z" level=info msg="TearDown network for sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\" successfully" Jul 10 00:39:20.658168 env[1196]: time="2025-07-10T00:39:20.657788757Z" level=info msg="StopPodSandbox for \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\" returns successfully" Jul 10 00:39:20.658226 kubelet[1938]: E0710 00:39:20.658159 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:20.658901 env[1196]: time="2025-07-10T00:39:20.658876200Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-rrm9z,Uid:3999c732-217c-4b04-9aa6-4feadf6686cd,Namespace:kube-system,Attempt:1,}" Jul 10 00:39:20.758561 systemd-networkd[1025]: cali950e473d7d5: Link UP Jul 10 00:39:20.759866 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali950e473d7d5: link becomes ready Jul 10 00:39:20.760014 systemd-networkd[1025]: cali950e473d7d5: Gained carrier Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.699 [INFO][3637] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0 coredns-7c65d6cfc9- kube-system 3999c732-217c-4b04-9aa6-4feadf6686cd 1021 0 2025-07-10 00:38:43 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-rrm9z eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali950e473d7d5 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rrm9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rrm9z-" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.699 [INFO][3637] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rrm9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.723 [INFO][3653] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" HandleID="k8s-pod-network.92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.723 [INFO][3653] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" HandleID="k8s-pod-network.92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004e6f0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-rrm9z", "timestamp":"2025-07-10 00:39:20.723448699 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.723 [INFO][3653] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.723 [INFO][3653] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.723 [INFO][3653] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.730 [INFO][3653] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" host="localhost" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.734 [INFO][3653] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.738 [INFO][3653] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.740 [INFO][3653] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.742 [INFO][3653] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.742 [INFO][3653] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" host="localhost" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.743 [INFO][3653] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699 Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.747 [INFO][3653] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" host="localhost" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.753 [INFO][3653] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" host="localhost" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.753 [INFO][3653] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" host="localhost" Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.753 [INFO][3653] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:20.771634 env[1196]: 2025-07-10 00:39:20.753 [INFO][3653] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" HandleID="k8s-pod-network.92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:20.772305 env[1196]: 2025-07-10 00:39:20.755 [INFO][3637] cni-plugin/k8s.go 418: Populated endpoint ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rrm9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3999c732-217c-4b04-9aa6-4feadf6686cd", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-rrm9z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali950e473d7d5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:20.772305 env[1196]: 2025-07-10 00:39:20.755 [INFO][3637] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rrm9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:20.772305 env[1196]: 2025-07-10 00:39:20.755 [INFO][3637] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali950e473d7d5 ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rrm9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:20.772305 env[1196]: 2025-07-10 00:39:20.760 [INFO][3637] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rrm9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:20.772305 env[1196]: 2025-07-10 00:39:20.760 [INFO][3637] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rrm9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3999c732-217c-4b04-9aa6-4feadf6686cd", ResourceVersion:"1021", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699", Pod:"coredns-7c65d6cfc9-rrm9z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali950e473d7d5", MAC:"9e:b5:7a:2f:7f:5a", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:20.772305 env[1196]: 2025-07-10 00:39:20.769 [INFO][3637] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699" Namespace="kube-system" Pod="coredns-7c65d6cfc9-rrm9z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:20.779000 audit[3671]: NETFILTER_CFG table=filter:108 family=2 entries=46 op=nft_register_chain pid=3671 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:20.779000 audit[3671]: SYSCALL arch=c000003e syscall=46 success=yes exit=23740 a0=3 a1=7ffe5e6bcf10 a2=0 a3=7ffe5e6bcefc items=0 ppid=3309 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.779000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:20.782529 env[1196]: time="2025-07-10T00:39:20.782465572Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:39:20.782529 env[1196]: time="2025-07-10T00:39:20.782502761Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:39:20.782627 env[1196]: time="2025-07-10T00:39:20.782518351Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:39:20.782682 env[1196]: time="2025-07-10T00:39:20.782649898Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699 pid=3677 runtime=io.containerd.runc.v2 Jul 10 00:39:20.794546 systemd[1]: Started cri-containerd-92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699.scope. Jul 10 00:39:20.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.804000 audit: BPF prog-id=169 op=LOAD Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3677 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932656631306364326562303636393334616632386135383338643064 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3677 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932656631306364326562303636393334616632386135383338643064 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit: BPF prog-id=170 op=LOAD Jul 10 00:39:20.805000 audit[3688]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002d5ce0 items=0 ppid=3677 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932656631306364326562303636393334616632386135383338643064 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit: BPF prog-id=171 op=LOAD Jul 10 00:39:20.805000 audit[3688]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002d5d28 items=0 ppid=3677 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932656631306364326562303636393334616632386135383338643064 Jul 10 00:39:20.805000 audit: BPF prog-id=171 op=UNLOAD Jul 10 00:39:20.805000 audit: BPF prog-id=170 op=UNLOAD Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { perfmon } for pid=3688 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit[3688]: AVC avc: denied { bpf } for pid=3688 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:20.805000 audit: BPF prog-id=172 op=LOAD Jul 10 00:39:20.805000 audit[3688]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003d8138 items=0 ppid=3677 pid=3688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:20.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932656631306364326562303636393334616632386135383338643064 Jul 10 00:39:20.807040 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:39:20.829507 env[1196]: time="2025-07-10T00:39:20.829378855Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-rrm9z,Uid:3999c732-217c-4b04-9aa6-4feadf6686cd,Namespace:kube-system,Attempt:1,} returns sandbox id \"92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699\"" Jul 10 00:39:20.830770 kubelet[1938]: E0710 00:39:20.830741 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:20.833060 env[1196]: time="2025-07-10T00:39:20.833017642Z" level=info msg="CreateContainer within sandbox \"92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:39:20.975685 env[1196]: time="2025-07-10T00:39:20.975542587Z" level=info msg="CreateContainer within sandbox \"92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"97a5408fdf702f5c500ddcce46f2f2228b616a8d05df7b2c3fe48658e4b1cd2b\"" Jul 10 00:39:20.976356 env[1196]: time="2025-07-10T00:39:20.976311562Z" level=info msg="StartContainer for \"97a5408fdf702f5c500ddcce46f2f2228b616a8d05df7b2c3fe48658e4b1cd2b\"" Jul 10 00:39:20.991884 systemd[1]: Started cri-containerd-97a5408fdf702f5c500ddcce46f2f2228b616a8d05df7b2c3fe48658e4b1cd2b.scope. Jul 10 00:39:21.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.004000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.004000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.004000 audit: BPF prog-id=173 op=LOAD Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3677 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937613534303866646637303266356335303064646363653436663266 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3677 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937613534303866646637303266356335303064646363653436663266 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit: BPF prog-id=174 op=LOAD Jul 10 00:39:21.005000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000255d40 items=0 ppid=3677 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937613534303866646637303266356335303064646363653436663266 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit: BPF prog-id=175 op=LOAD Jul 10 00:39:21.005000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000255d88 items=0 ppid=3677 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937613534303866646637303266356335303064646363653436663266 Jul 10 00:39:21.005000 audit: BPF prog-id=175 op=UNLOAD Jul 10 00:39:21.005000 audit: BPF prog-id=174 op=UNLOAD Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { perfmon } for pid=3721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit[3721]: AVC avc: denied { bpf } for pid=3721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:21.005000 audit: BPF prog-id=176 op=LOAD Jul 10 00:39:21.005000 audit[3721]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003a4198 items=0 ppid=3677 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.005000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3937613534303866646637303266356335303064646363653436663266 Jul 10 00:39:21.061798 systemd[1]: run-netns-cni\x2d6c6118eb\x2da0af\x2d5aeb\x2d8d30\x2dbf1e44f843a1.mount: Deactivated successfully. Jul 10 00:39:21.184000 audit[3732]: AVC avc: denied { getattr } for pid=3732 comm="coredns" path="cgroup:[4026532417]" dev="nsfs" ino=4026532417 scontext=system_u:system_r:svirt_lxc_net_t:s0:c737,c844 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:39:21.184000 audit[3732]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00015eaf8 a2=c0004a7968 a3=0 items=0 ppid=3677 pid=3732 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c737,c844 key=(null) Jul 10 00:39:21.184000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:39:21.192129 env[1196]: time="2025-07-10T00:39:21.192072010Z" level=info msg="StartContainer for \"97a5408fdf702f5c500ddcce46f2f2228b616a8d05df7b2c3fe48658e4b1cd2b\" returns successfully" Jul 10 00:39:21.585704 env[1196]: time="2025-07-10T00:39:21.585667376Z" level=info msg="StopPodSandbox for \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\"" Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.618 [INFO][3764] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.618 [INFO][3764] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" iface="eth0" netns="/var/run/netns/cni-39ac1e2a-0275-ae79-0186-3867cad61fb2" Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.618 [INFO][3764] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" iface="eth0" netns="/var/run/netns/cni-39ac1e2a-0275-ae79-0186-3867cad61fb2" Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.619 [INFO][3764] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" iface="eth0" netns="/var/run/netns/cni-39ac1e2a-0275-ae79-0186-3867cad61fb2" Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.619 [INFO][3764] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.619 [INFO][3764] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.647 [INFO][3773] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" HandleID="k8s-pod-network.9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.648 [INFO][3773] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.648 [INFO][3773] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.652 [WARNING][3773] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" HandleID="k8s-pod-network.9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.652 [INFO][3773] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" HandleID="k8s-pod-network.9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.654 [INFO][3773] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:21.657031 env[1196]: 2025-07-10 00:39:21.655 [INFO][3764] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:21.660608 env[1196]: time="2025-07-10T00:39:21.657168942Z" level=info msg="TearDown network for sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\" successfully" Jul 10 00:39:21.660608 env[1196]: time="2025-07-10T00:39:21.657199709Z" level=info msg="StopPodSandbox for \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\" returns successfully" Jul 10 00:39:21.660608 env[1196]: time="2025-07-10T00:39:21.657812421Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cd7f67fb4-k4g4b,Uid:c0b395d4-9441-4e9b-8858-23c201917aba,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:39:21.659395 systemd[1]: run-netns-cni\x2d39ac1e2a\x2d0275\x2dae79\x2d0186\x2d3867cad61fb2.mount: Deactivated successfully. Jul 10 00:39:21.726882 kubelet[1938]: E0710 00:39:21.726836 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:21.749421 kubelet[1938]: I0710 00:39:21.749358 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-rrm9z" podStartSLOduration=38.749333743 podStartE2EDuration="38.749333743s" podCreationTimestamp="2025-07-10 00:38:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:39:21.746025068 +0000 UTC m=+45.239651364" watchObservedRunningTime="2025-07-10 00:39:21.749333743 +0000 UTC m=+45.242960019" Jul 10 00:39:21.764443 systemd-networkd[1025]: caliae5a33f94a2: Gained IPv6LL Jul 10 00:39:21.784862 kernel: kauditd_printk_skb: 838 callbacks suppressed Jul 10 00:39:21.785103 kernel: audit: type=1325 audit(1752107961.779:1191): table=filter:109 family=2 entries=20 op=nft_register_rule pid=3804 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:21.779000 audit[3804]: NETFILTER_CFG table=filter:109 family=2 entries=20 op=nft_register_rule pid=3804 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:21.796910 kernel: audit: type=1300 audit(1752107961.779:1191): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc6f6cf380 a2=0 a3=7ffc6f6cf36c items=0 ppid=2046 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.779000 audit[3804]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc6f6cf380 a2=0 a3=7ffc6f6cf36c items=0 ppid=2046 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.779000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:21.802958 kernel: audit: type=1327 audit(1752107961.779:1191): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:21.802000 audit[3804]: NETFILTER_CFG table=nat:110 family=2 entries=14 op=nft_register_rule pid=3804 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:21.817964 kernel: audit: type=1325 audit(1752107961.802:1192): table=nat:110 family=2 entries=14 op=nft_register_rule pid=3804 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:21.818071 kernel: audit: type=1300 audit(1752107961.802:1192): arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc6f6cf380 a2=0 a3=0 items=0 ppid=2046 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.802000 audit[3804]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc6f6cf380 a2=0 a3=0 items=0 ppid=2046 pid=3804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.802000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:21.823124 kernel: audit: type=1327 audit(1752107961.802:1192): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:21.826818 systemd-networkd[1025]: cali4f45c9df2ba: Gained IPv6LL Jul 10 00:39:21.835000 audit[3809]: NETFILTER_CFG table=filter:111 family=2 entries=17 op=nft_register_rule pid=3809 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:21.835000 audit[3809]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe7f282e10 a2=0 a3=7ffe7f282dfc items=0 ppid=2046 pid=3809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.850470 kernel: audit: type=1325 audit(1752107961.835:1193): table=filter:111 family=2 entries=17 op=nft_register_rule pid=3809 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:21.850534 kernel: audit: type=1300 audit(1752107961.835:1193): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe7f282e10 a2=0 a3=7ffe7f282dfc items=0 ppid=2046 pid=3809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.835000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:21.854294 kernel: audit: type=1327 audit(1752107961.835:1193): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:21.858000 audit[3809]: NETFILTER_CFG table=nat:112 family=2 entries=35 op=nft_register_chain pid=3809 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:21.858000 audit[3809]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe7f282e10 a2=0 a3=7ffe7f282dfc items=0 ppid=2046 pid=3809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:21.858000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:21.864872 kernel: audit: type=1325 audit(1752107961.858:1194): table=nat:112 family=2 entries=35 op=nft_register_chain pid=3809 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:22.055511 systemd-networkd[1025]: cali0e8b21b3f0c: Link UP Jul 10 00:39:22.058031 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:39:22.058088 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali0e8b21b3f0c: link becomes ready Jul 10 00:39:22.058200 systemd-networkd[1025]: cali0e8b21b3f0c: Gained carrier Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.716 [INFO][3782] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0 calico-apiserver-5cd7f67fb4- calico-apiserver c0b395d4-9441-4e9b-8858-23c201917aba 1037 0 2025-07-10 00:38:53 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5cd7f67fb4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5cd7f67fb4-k4g4b eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali0e8b21b3f0c [] [] }} ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-k4g4b" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.716 [INFO][3782] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-k4g4b" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.855 [INFO][3797] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" HandleID="k8s-pod-network.09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.855 [INFO][3797] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" HandleID="k8s-pod-network.09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000354650), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5cd7f67fb4-k4g4b", "timestamp":"2025-07-10 00:39:21.855599141 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.855 [INFO][3797] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.855 [INFO][3797] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.855 [INFO][3797] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.864 [INFO][3797] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" host="localhost" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.868 [INFO][3797] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.872 [INFO][3797] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.874 [INFO][3797] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.877 [INFO][3797] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.877 [INFO][3797] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" host="localhost" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.878 [INFO][3797] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:21.984 [INFO][3797] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" host="localhost" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:22.050 [INFO][3797] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" host="localhost" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:22.050 [INFO][3797] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" host="localhost" Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:22.051 [INFO][3797] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:22.070974 env[1196]: 2025-07-10 00:39:22.051 [INFO][3797] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" HandleID="k8s-pod-network.09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:22.072121 env[1196]: 2025-07-10 00:39:22.053 [INFO][3782] cni-plugin/k8s.go 418: Populated endpoint ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-k4g4b" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0", GenerateName:"calico-apiserver-5cd7f67fb4-", Namespace:"calico-apiserver", SelfLink:"", UID:"c0b395d4-9441-4e9b-8858-23c201917aba", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cd7f67fb4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5cd7f67fb4-k4g4b", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0e8b21b3f0c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:22.072121 env[1196]: 2025-07-10 00:39:22.053 [INFO][3782] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-k4g4b" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:22.072121 env[1196]: 2025-07-10 00:39:22.053 [INFO][3782] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali0e8b21b3f0c ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-k4g4b" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:22.072121 env[1196]: 2025-07-10 00:39:22.055 [INFO][3782] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-k4g4b" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:22.072121 env[1196]: 2025-07-10 00:39:22.058 [INFO][3782] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-k4g4b" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0", GenerateName:"calico-apiserver-5cd7f67fb4-", Namespace:"calico-apiserver", SelfLink:"", UID:"c0b395d4-9441-4e9b-8858-23c201917aba", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cd7f67fb4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e", Pod:"calico-apiserver-5cd7f67fb4-k4g4b", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0e8b21b3f0c", MAC:"8a:bb:db:b4:65:c4", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:22.072121 env[1196]: 2025-07-10 00:39:22.067 [INFO][3782] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-k4g4b" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:22.082056 systemd-networkd[1025]: cali950e473d7d5: Gained IPv6LL Jul 10 00:39:22.081000 audit[3819]: NETFILTER_CFG table=filter:113 family=2 entries=58 op=nft_register_chain pid=3819 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:22.081000 audit[3819]: SYSCALL arch=c000003e syscall=46 success=yes exit=30584 a0=3 a1=7ffdb5446670 a2=0 a3=7ffdb544665c items=0 ppid=3309 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:22.081000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:22.200512 env[1196]: time="2025-07-10T00:39:22.200357187Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:39:22.200512 env[1196]: time="2025-07-10T00:39:22.200395709Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:39:22.200512 env[1196]: time="2025-07-10T00:39:22.200405037Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:39:22.200768 env[1196]: time="2025-07-10T00:39:22.200527747Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e pid=3826 runtime=io.containerd.runc.v2 Jul 10 00:39:22.224036 systemd[1]: run-containerd-runc-k8s.io-09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e-runc.4WBYMF.mount: Deactivated successfully. Jul 10 00:39:22.225492 systemd[1]: Started cri-containerd-09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e.scope. Jul 10 00:39:22.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit: BPF prog-id=177 op=LOAD Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3826 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:22.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039623435653130623532643965303666663561643765386230623530 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3826 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:22.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039623435653130623532643965303666663561643765386230623530 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.237000 audit: BPF prog-id=178 op=LOAD Jul 10 00:39:22.237000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00032ded0 items=0 ppid=3826 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:22.237000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039623435653130623532643965303666663561643765386230623530 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit: BPF prog-id=179 op=LOAD Jul 10 00:39:22.238000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00032df18 items=0 ppid=3826 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:22.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039623435653130623532643965303666663561643765386230623530 Jul 10 00:39:22.238000 audit: BPF prog-id=179 op=UNLOAD Jul 10 00:39:22.238000 audit: BPF prog-id=178 op=UNLOAD Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:22.238000 audit: BPF prog-id=180 op=LOAD Jul 10 00:39:22.238000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003b0328 items=0 ppid=3826 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:22.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039623435653130623532643965303666663561643765386230623530 Jul 10 00:39:22.239639 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:39:22.264309 env[1196]: time="2025-07-10T00:39:22.264269576Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cd7f67fb4-k4g4b,Uid:c0b395d4-9441-4e9b-8858-23c201917aba,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e\"" Jul 10 00:39:22.273997 systemd-networkd[1025]: vxlan.calico: Gained IPv6LL Jul 10 00:39:22.586688 env[1196]: time="2025-07-10T00:39:22.586651691Z" level=info msg="StopPodSandbox for \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\"" Jul 10 00:39:22.587362 env[1196]: time="2025-07-10T00:39:22.586739756Z" level=info msg="StopPodSandbox for \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\"" Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.629 [INFO][3883] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.629 [INFO][3883] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" iface="eth0" netns="/var/run/netns/cni-1ef7f2a9-d237-fbfe-fd43-3f812cbc5b0b" Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.629 [INFO][3883] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" iface="eth0" netns="/var/run/netns/cni-1ef7f2a9-d237-fbfe-fd43-3f812cbc5b0b" Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.630 [INFO][3883] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" iface="eth0" netns="/var/run/netns/cni-1ef7f2a9-d237-fbfe-fd43-3f812cbc5b0b" Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.630 [INFO][3883] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.630 [INFO][3883] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.663 [INFO][3899] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" HandleID="k8s-pod-network.eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.663 [INFO][3899] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.663 [INFO][3899] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.668 [WARNING][3899] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" HandleID="k8s-pod-network.eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.668 [INFO][3899] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" HandleID="k8s-pod-network.eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.669 [INFO][3899] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:22.672635 env[1196]: 2025-07-10 00:39:22.670 [INFO][3883] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:22.674025 env[1196]: time="2025-07-10T00:39:22.673967891Z" level=info msg="TearDown network for sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\" successfully" Jul 10 00:39:22.674025 env[1196]: time="2025-07-10T00:39:22.674016562Z" level=info msg="StopPodSandbox for \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\" returns successfully" Jul 10 00:39:22.674610 systemd[1]: run-netns-cni\x2d1ef7f2a9\x2dd237\x2dfbfe\x2dfd43\x2d3f812cbc5b0b.mount: Deactivated successfully. Jul 10 00:39:22.674736 env[1196]: time="2025-07-10T00:39:22.674693022Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-77d569b777-mmjg7,Uid:fdf484de-e1cd-42c7-aa05-0614545158c1,Namespace:calico-system,Attempt:1,}" Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.638 [INFO][3882] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.639 [INFO][3882] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" iface="eth0" netns="/var/run/netns/cni-4a793b76-2e32-d484-5803-1ec26b4fc266" Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.639 [INFO][3882] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" iface="eth0" netns="/var/run/netns/cni-4a793b76-2e32-d484-5803-1ec26b4fc266" Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.639 [INFO][3882] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" iface="eth0" netns="/var/run/netns/cni-4a793b76-2e32-d484-5803-1ec26b4fc266" Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.639 [INFO][3882] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.639 [INFO][3882] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.663 [INFO][3906] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" HandleID="k8s-pod-network.3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.664 [INFO][3906] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.669 [INFO][3906] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.677 [WARNING][3906] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" HandleID="k8s-pod-network.3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.677 [INFO][3906] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" HandleID="k8s-pod-network.3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.679 [INFO][3906] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:22.682560 env[1196]: 2025-07-10 00:39:22.681 [INFO][3882] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:22.683173 env[1196]: time="2025-07-10T00:39:22.683143805Z" level=info msg="TearDown network for sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\" successfully" Jul 10 00:39:22.683252 env[1196]: time="2025-07-10T00:39:22.683231631Z" level=info msg="StopPodSandbox for \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\" returns successfully" Jul 10 00:39:22.683927 env[1196]: time="2025-07-10T00:39:22.683890107Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zmrl9,Uid:e5aa62d9-8cf0-4934-8250-b0d96b853d89,Namespace:calico-system,Attempt:1,}" Jul 10 00:39:22.730574 kubelet[1938]: E0710 00:39:22.730532 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:22.909095 systemd-networkd[1025]: cali97bbb293f6b: Link UP Jul 10 00:39:22.911643 systemd-networkd[1025]: cali97bbb293f6b: Gained carrier Jul 10 00:39:22.911907 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali97bbb293f6b: link becomes ready Jul 10 00:39:22.987659 systemd[1]: Started sshd@8-10.0.0.42:22-10.0.0.1:52992.service. Jul 10 00:39:22.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.42:22-10.0.0.1:52992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.830 [INFO][3915] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0 calico-kube-controllers-77d569b777- calico-system fdf484de-e1cd-42c7-aa05-0614545158c1 1058 0 2025-07-10 00:38:56 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:77d569b777 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-77d569b777-mmjg7 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali97bbb293f6b [] [] }} ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Namespace="calico-system" Pod="calico-kube-controllers-77d569b777-mmjg7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.830 [INFO][3915] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Namespace="calico-system" Pod="calico-kube-controllers-77d569b777-mmjg7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.860 [INFO][3945] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" HandleID="k8s-pod-network.ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.860 [INFO][3945] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" HandleID="k8s-pod-network.ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9260), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-77d569b777-mmjg7", "timestamp":"2025-07-10 00:39:22.860418328 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.860 [INFO][3945] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.860 [INFO][3945] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.860 [INFO][3945] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.866 [INFO][3945] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" host="localhost" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.872 [INFO][3945] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.878 [INFO][3945] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.880 [INFO][3945] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.884 [INFO][3945] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.884 [INFO][3945] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" host="localhost" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.890 [INFO][3945] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.896 [INFO][3945] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" host="localhost" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.903 [INFO][3945] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" host="localhost" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.903 [INFO][3945] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" host="localhost" Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.903 [INFO][3945] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:23.022128 env[1196]: 2025-07-10 00:39:22.903 [INFO][3945] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" HandleID="k8s-pod-network.ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:23.022746 env[1196]: 2025-07-10 00:39:22.906 [INFO][3915] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Namespace="calico-system" Pod="calico-kube-controllers-77d569b777-mmjg7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0", GenerateName:"calico-kube-controllers-77d569b777-", Namespace:"calico-system", SelfLink:"", UID:"fdf484de-e1cd-42c7-aa05-0614545158c1", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"77d569b777", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-77d569b777-mmjg7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali97bbb293f6b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:23.022746 env[1196]: 2025-07-10 00:39:22.906 [INFO][3915] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Namespace="calico-system" Pod="calico-kube-controllers-77d569b777-mmjg7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:23.022746 env[1196]: 2025-07-10 00:39:22.906 [INFO][3915] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali97bbb293f6b ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Namespace="calico-system" Pod="calico-kube-controllers-77d569b777-mmjg7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:23.022746 env[1196]: 2025-07-10 00:39:22.912 [INFO][3915] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Namespace="calico-system" Pod="calico-kube-controllers-77d569b777-mmjg7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:23.022746 env[1196]: 2025-07-10 00:39:22.913 [INFO][3915] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Namespace="calico-system" Pod="calico-kube-controllers-77d569b777-mmjg7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0", GenerateName:"calico-kube-controllers-77d569b777-", Namespace:"calico-system", SelfLink:"", UID:"fdf484de-e1cd-42c7-aa05-0614545158c1", ResourceVersion:"1058", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"77d569b777", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f", Pod:"calico-kube-controllers-77d569b777-mmjg7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali97bbb293f6b", MAC:"5a:08:98:a5:67:42", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:23.022746 env[1196]: 2025-07-10 00:39:23.014 [INFO][3915] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f" Namespace="calico-system" Pod="calico-kube-controllers-77d569b777-mmjg7" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:23.026000 audit[3969]: NETFILTER_CFG table=filter:114 family=2 entries=54 op=nft_register_chain pid=3969 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:23.026000 audit[3969]: SYSCALL arch=c000003e syscall=46 success=yes exit=25992 a0=3 a1=7fffaa330550 a2=0 a3=7fffaa33053c items=0 ppid=3309 pid=3969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.026000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:23.044000 audit[3964]: USER_ACCT pid=3964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:23.045000 audit[3964]: CRED_ACQ pid=3964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:23.045000 audit[3964]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd8558f160 a2=3 a3=0 items=0 ppid=1 pid=3964 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.045000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:23.047027 sshd[3964]: Accepted publickey for core from 10.0.0.1 port 52992 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:23.047390 sshd[3964]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:23.050986 systemd-logind[1186]: New session 9 of user core. Jul 10 00:39:23.051762 systemd[1]: Started session-9.scope. Jul 10 00:39:23.054000 audit[3964]: USER_START pid=3964 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:23.056000 audit[3974]: CRED_ACQ pid=3974 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:23.069815 env[1196]: time="2025-07-10T00:39:23.069746949Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:39:23.069992 env[1196]: time="2025-07-10T00:39:23.069797183Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:39:23.069992 env[1196]: time="2025-07-10T00:39:23.069808194Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:39:23.070127 env[1196]: time="2025-07-10T00:39:23.070100072Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f pid=3982 runtime=io.containerd.runc.v2 Jul 10 00:39:23.074292 systemd-networkd[1025]: calidfbb0bc868b: Link UP Jul 10 00:39:23.075882 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:39:23.075930 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidfbb0bc868b: link becomes ready Jul 10 00:39:23.076987 systemd-networkd[1025]: calidfbb0bc868b: Gained carrier Jul 10 00:39:23.081674 systemd[1]: Started cri-containerd-ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f.scope. Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:22.823 [INFO][3925] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--zmrl9-eth0 csi-node-driver- calico-system e5aa62d9-8cf0-4934-8250-b0d96b853d89 1059 0 2025-07-10 00:38:56 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-zmrl9 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calidfbb0bc868b [] [] }} ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Namespace="calico-system" Pod="csi-node-driver-zmrl9" WorkloadEndpoint="localhost-k8s-csi--node--driver--zmrl9-" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:22.823 [INFO][3925] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Namespace="calico-system" Pod="csi-node-driver-zmrl9" WorkloadEndpoint="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:22.879 [INFO][3950] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" HandleID="k8s-pod-network.e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:22.879 [INFO][3950] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" HandleID="k8s-pod-network.e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000139760), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-zmrl9", "timestamp":"2025-07-10 00:39:22.879164569 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:22.879 [INFO][3950] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:22.903 [INFO][3950] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:22.903 [INFO][3950] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:22.967 [INFO][3950] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" host="localhost" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.017 [INFO][3950] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.026 [INFO][3950] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.028 [INFO][3950] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.031 [INFO][3950] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.031 [INFO][3950] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" host="localhost" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.032 [INFO][3950] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8 Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.044 [INFO][3950] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" host="localhost" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.066 [INFO][3950] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" host="localhost" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.066 [INFO][3950] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" host="localhost" Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.066 [INFO][3950] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:23.092019 env[1196]: 2025-07-10 00:39:23.066 [INFO][3950] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" HandleID="k8s-pod-network.e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:23.092756 env[1196]: 2025-07-10 00:39:23.070 [INFO][3925] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Namespace="calico-system" Pod="csi-node-driver-zmrl9" WorkloadEndpoint="localhost-k8s-csi--node--driver--zmrl9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zmrl9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e5aa62d9-8cf0-4934-8250-b0d96b853d89", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-zmrl9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidfbb0bc868b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:23.092756 env[1196]: 2025-07-10 00:39:23.070 [INFO][3925] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Namespace="calico-system" Pod="csi-node-driver-zmrl9" WorkloadEndpoint="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:23.092756 env[1196]: 2025-07-10 00:39:23.070 [INFO][3925] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidfbb0bc868b ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Namespace="calico-system" Pod="csi-node-driver-zmrl9" WorkloadEndpoint="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:23.092756 env[1196]: 2025-07-10 00:39:23.077 [INFO][3925] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Namespace="calico-system" Pod="csi-node-driver-zmrl9" WorkloadEndpoint="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:23.092756 env[1196]: 2025-07-10 00:39:23.077 [INFO][3925] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Namespace="calico-system" Pod="csi-node-driver-zmrl9" WorkloadEndpoint="localhost-k8s-csi--node--driver--zmrl9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zmrl9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e5aa62d9-8cf0-4934-8250-b0d96b853d89", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8", Pod:"csi-node-driver-zmrl9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidfbb0bc868b", MAC:"ce:89:91:c2:16:7c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:23.092756 env[1196]: 2025-07-10 00:39:23.089 [INFO][3925] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8" Namespace="calico-system" Pod="csi-node-driver-zmrl9" WorkloadEndpoint="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:23.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.100000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.100000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.100000 audit: BPF prog-id=181 op=LOAD Jul 10 00:39:23.101000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.101000 audit[3991]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3982 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.101000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666336361353436653563346339346335393339396262346466396532 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit[3991]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3982 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666336361353436653563346339346335393339396262346466396532 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.102000 audit: BPF prog-id=182 op=LOAD Jul 10 00:39:23.102000 audit[3991]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00026dd90 items=0 ppid=3982 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666336361353436653563346339346335393339396262346466396532 Jul 10 00:39:23.103000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.103000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.103000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.103000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.103000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.103000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.103000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.103000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.103000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.103000 audit: BPF prog-id=183 op=LOAD Jul 10 00:39:23.103000 audit[3991]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00026ddd8 items=0 ppid=3982 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666336361353436653563346339346335393339396262346466396532 Jul 10 00:39:23.103000 audit: BPF prog-id=183 op=UNLOAD Jul 10 00:39:23.104000 audit: BPF prog-id=182 op=UNLOAD Jul 10 00:39:23.104000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.104000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.104000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.104000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.104000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.104000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.104000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.104000 audit[3991]: AVC avc: denied { perfmon } for pid=3991 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.104000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.104000 audit[3991]: AVC avc: denied { bpf } for pid=3991 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.104000 audit: BPF prog-id=184 op=LOAD Jul 10 00:39:23.104000 audit[3991]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003e61e8 items=0 ppid=3982 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666336361353436653563346339346335393339396262346466396532 Jul 10 00:39:23.107130 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:39:23.111000 audit[4021]: NETFILTER_CFG table=filter:115 family=2 entries=48 op=nft_register_chain pid=4021 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:23.111000 audit[4021]: SYSCALL arch=c000003e syscall=46 success=yes exit=23124 a0=3 a1=7ffd71419920 a2=0 a3=7ffd7141990c items=0 ppid=3309 pid=4021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.111000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:23.131938 env[1196]: time="2025-07-10T00:39:23.131895136Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-77d569b777-mmjg7,Uid:fdf484de-e1cd-42c7-aa05-0614545158c1,Namespace:calico-system,Attempt:1,} returns sandbox id \"ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f\"" Jul 10 00:39:23.197395 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3507090097.mount: Deactivated successfully. Jul 10 00:39:23.197488 systemd[1]: run-netns-cni\x2d4a793b76\x2d2e32\x2dd484\x2d5803\x2d1ec26b4fc266.mount: Deactivated successfully. Jul 10 00:39:23.233956 systemd-networkd[1025]: cali0e8b21b3f0c: Gained IPv6LL Jul 10 00:39:23.321422 env[1196]: time="2025-07-10T00:39:23.321321737Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:39:23.321422 env[1196]: time="2025-07-10T00:39:23.321361141Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:39:23.321422 env[1196]: time="2025-07-10T00:39:23.321370719Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:39:23.321730 env[1196]: time="2025-07-10T00:39:23.321692313Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8 pid=4038 runtime=io.containerd.runc.v2 Jul 10 00:39:23.359026 systemd[1]: run-containerd-runc-k8s.io-e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8-runc.FZWCw0.mount: Deactivated successfully. Jul 10 00:39:23.365533 systemd[1]: Started cri-containerd-e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8.scope. Jul 10 00:39:23.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.399000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.399000 audit: BPF prog-id=185 op=LOAD Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4038 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539363630393139373737386233393663303338303136643336343639 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4038 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539363630393139373737386233393663303338303136643336343639 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit: BPF prog-id=186 op=LOAD Jul 10 00:39:23.400000 audit[4047]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000281520 items=0 ppid=4038 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539363630393139373737386233393663303338303136643336343639 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit: BPF prog-id=187 op=LOAD Jul 10 00:39:23.400000 audit[4047]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000281568 items=0 ppid=4038 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539363630393139373737386233393663303338303136643336343639 Jul 10 00:39:23.400000 audit: BPF prog-id=187 op=UNLOAD Jul 10 00:39:23.400000 audit: BPF prog-id=186 op=UNLOAD Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { perfmon } for pid=4047 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit[4047]: AVC avc: denied { bpf } for pid=4047 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:23.400000 audit: BPF prog-id=188 op=LOAD Jul 10 00:39:23.400000 audit[4047]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000281978 items=0 ppid=4038 pid=4047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:23.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539363630393139373737386233393663303338303136643336343639 Jul 10 00:39:23.402021 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:39:23.412779 env[1196]: time="2025-07-10T00:39:23.412729699Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zmrl9,Uid:e5aa62d9-8cf0-4934-8250-b0d96b853d89,Namespace:calico-system,Attempt:1,} returns sandbox id \"e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8\"" Jul 10 00:39:23.426489 sshd[3964]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:23.429000 audit[3964]: USER_END pid=3964 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:23.429000 audit[3964]: CRED_DISP pid=3964 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:23.432435 systemd-logind[1186]: Session 9 logged out. Waiting for processes to exit. Jul 10 00:39:23.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.42:22-10.0.0.1:52992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:23.435524 systemd[1]: sshd@8-10.0.0.42:22-10.0.0.1:52992.service: Deactivated successfully. Jul 10 00:39:23.436325 systemd[1]: session-9.scope: Deactivated successfully. Jul 10 00:39:23.437807 systemd-logind[1186]: Removed session 9. Jul 10 00:39:23.586268 env[1196]: time="2025-07-10T00:39:23.586233464Z" level=info msg="StopPodSandbox for \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\"" Jul 10 00:39:23.586514 env[1196]: time="2025-07-10T00:39:23.586232062Z" level=info msg="StopPodSandbox for \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\"" Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.637 [INFO][4099] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.637 [INFO][4099] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" iface="eth0" netns="/var/run/netns/cni-8ad5f39a-5539-74eb-256e-d6067b09b91c" Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.637 [INFO][4099] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" iface="eth0" netns="/var/run/netns/cni-8ad5f39a-5539-74eb-256e-d6067b09b91c" Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.637 [INFO][4099] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" iface="eth0" netns="/var/run/netns/cni-8ad5f39a-5539-74eb-256e-d6067b09b91c" Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.637 [INFO][4099] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.637 [INFO][4099] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.672 [INFO][4121] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" HandleID="k8s-pod-network.cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.672 [INFO][4121] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.673 [INFO][4121] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.678 [WARNING][4121] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" HandleID="k8s-pod-network.cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.678 [INFO][4121] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" HandleID="k8s-pod-network.cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.679 [INFO][4121] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:23.682756 env[1196]: 2025-07-10 00:39:23.681 [INFO][4099] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:23.683880 env[1196]: time="2025-07-10T00:39:23.683807928Z" level=info msg="TearDown network for sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\" successfully" Jul 10 00:39:23.683985 env[1196]: time="2025-07-10T00:39:23.683961066Z" level=info msg="StopPodSandbox for \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\" returns successfully" Jul 10 00:39:23.684777 env[1196]: time="2025-07-10T00:39:23.684751370Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cd7f67fb4-8bxgr,Uid:dcbc48e0-8448-4980-ac86-8660732ecd60,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.631 [INFO][4098] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.631 [INFO][4098] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" iface="eth0" netns="/var/run/netns/cni-c31596ae-2f10-b243-1d3e-4bbde72ceb01" Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.631 [INFO][4098] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" iface="eth0" netns="/var/run/netns/cni-c31596ae-2f10-b243-1d3e-4bbde72ceb01" Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.631 [INFO][4098] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" iface="eth0" netns="/var/run/netns/cni-c31596ae-2f10-b243-1d3e-4bbde72ceb01" Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.631 [INFO][4098] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.631 [INFO][4098] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.675 [INFO][4114] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" HandleID="k8s-pod-network.b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.675 [INFO][4114] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.679 [INFO][4114] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.686 [WARNING][4114] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" HandleID="k8s-pod-network.b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.686 [INFO][4114] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" HandleID="k8s-pod-network.b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.689 [INFO][4114] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:23.693520 env[1196]: 2025-07-10 00:39:23.691 [INFO][4098] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:23.693877 env[1196]: time="2025-07-10T00:39:23.693664311Z" level=info msg="TearDown network for sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\" successfully" Jul 10 00:39:23.693877 env[1196]: time="2025-07-10T00:39:23.693706490Z" level=info msg="StopPodSandbox for \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\" returns successfully" Jul 10 00:39:23.694116 kubelet[1938]: E0710 00:39:23.694091 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:23.694581 env[1196]: time="2025-07-10T00:39:23.694538763Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jqbfq,Uid:f8f65afc-561e-4d28-b1a1-4952487d5e88,Namespace:kube-system,Attempt:1,}" Jul 10 00:39:23.734749 kubelet[1938]: E0710 00:39:23.734721 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:23.920485 env[1196]: time="2025-07-10T00:39:23.920366884Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:23.926828 env[1196]: time="2025-07-10T00:39:23.926776963Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:23.935811 env[1196]: time="2025-07-10T00:39:23.935776586Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:23.936574 env[1196]: time="2025-07-10T00:39:23.936549858Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:23.936823 env[1196]: time="2025-07-10T00:39:23.936784148Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 10 00:39:23.938765 env[1196]: time="2025-07-10T00:39:23.938734612Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 10 00:39:23.942110 env[1196]: time="2025-07-10T00:39:23.942090144Z" level=info msg="CreateContainer within sandbox \"879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 10 00:39:23.955874 env[1196]: time="2025-07-10T00:39:23.955802459Z" level=info msg="CreateContainer within sandbox \"879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"b9f23d26ef3ea6d1adc7df37e75a849b7785a2eda31ccb1d368beaa97bf41b38\"" Jul 10 00:39:23.956703 env[1196]: time="2025-07-10T00:39:23.956668295Z" level=info msg="StartContainer for \"b9f23d26ef3ea6d1adc7df37e75a849b7785a2eda31ccb1d368beaa97bf41b38\"" Jul 10 00:39:23.977653 systemd[1]: Started cri-containerd-b9f23d26ef3ea6d1adc7df37e75a849b7785a2eda31ccb1d368beaa97bf41b38.scope. Jul 10 00:39:24.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit: BPF prog-id=189 op=LOAD Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3396 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239663233643236656633656136643161646337646633376537356138 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3396 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239663233643236656633656136643161646337646633376537356138 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit: BPF prog-id=190 op=LOAD Jul 10 00:39:24.000000 audit[4177]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002986f0 items=0 ppid=3396 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239663233643236656633656136643161646337646633376537356138 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit: BPF prog-id=191 op=LOAD Jul 10 00:39:24.000000 audit[4177]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000298738 items=0 ppid=3396 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239663233643236656633656136643161646337646633376537356138 Jul 10 00:39:24.000000 audit: BPF prog-id=191 op=UNLOAD Jul 10 00:39:24.000000 audit: BPF prog-id=190 op=UNLOAD Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { perfmon } for pid=4177 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit[4177]: AVC avc: denied { bpf } for pid=4177 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.000000 audit: BPF prog-id=192 op=LOAD Jul 10 00:39:24.000000 audit[4177]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000298b48 items=0 ppid=3396 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6239663233643236656633656136643161646337646633376537356138 Jul 10 00:39:24.020796 systemd-networkd[1025]: cali8a1d9ebfbff: Link UP Jul 10 00:39:24.023164 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8a1d9ebfbff: link becomes ready Jul 10 00:39:24.023062 systemd-networkd[1025]: cali8a1d9ebfbff: Gained carrier Jul 10 00:39:24.029780 env[1196]: time="2025-07-10T00:39:24.029738672Z" level=info msg="StartContainer for \"b9f23d26ef3ea6d1adc7df37e75a849b7785a2eda31ccb1d368beaa97bf41b38\" returns successfully" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.949 [INFO][4130] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0 calico-apiserver-5cd7f67fb4- calico-apiserver dcbc48e0-8448-4980-ac86-8660732ecd60 1081 0 2025-07-10 00:38:53 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5cd7f67fb4 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5cd7f67fb4-8bxgr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8a1d9ebfbff [] [] }} ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-8bxgr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.949 [INFO][4130] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-8bxgr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.972 [INFO][4162] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" HandleID="k8s-pod-network.ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.973 [INFO][4162] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" HandleID="k8s-pod-network.ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000130b10), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5cd7f67fb4-8bxgr", "timestamp":"2025-07-10 00:39:23.972631497 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.973 [INFO][4162] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.973 [INFO][4162] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.973 [INFO][4162] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.982 [INFO][4162] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" host="localhost" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.990 [INFO][4162] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.997 [INFO][4162] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:23.999 [INFO][4162] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:24.003 [INFO][4162] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:24.003 [INFO][4162] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" host="localhost" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:24.004 [INFO][4162] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:24.008 [INFO][4162] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" host="localhost" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:24.013 [INFO][4162] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" host="localhost" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:24.013 [INFO][4162] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" host="localhost" Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:24.013 [INFO][4162] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:24.034186 env[1196]: 2025-07-10 00:39:24.013 [INFO][4162] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" HandleID="k8s-pod-network.ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:24.034740 env[1196]: 2025-07-10 00:39:24.015 [INFO][4130] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-8bxgr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0", GenerateName:"calico-apiserver-5cd7f67fb4-", Namespace:"calico-apiserver", SelfLink:"", UID:"dcbc48e0-8448-4980-ac86-8660732ecd60", ResourceVersion:"1081", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cd7f67fb4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5cd7f67fb4-8bxgr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8a1d9ebfbff", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:24.034740 env[1196]: 2025-07-10 00:39:24.016 [INFO][4130] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-8bxgr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:24.034740 env[1196]: 2025-07-10 00:39:24.016 [INFO][4130] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8a1d9ebfbff ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-8bxgr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:24.034740 env[1196]: 2025-07-10 00:39:24.023 [INFO][4130] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-8bxgr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:24.034740 env[1196]: 2025-07-10 00:39:24.024 [INFO][4130] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-8bxgr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0", GenerateName:"calico-apiserver-5cd7f67fb4-", Namespace:"calico-apiserver", SelfLink:"", UID:"dcbc48e0-8448-4980-ac86-8660732ecd60", ResourceVersion:"1081", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cd7f67fb4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba", Pod:"calico-apiserver-5cd7f67fb4-8bxgr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8a1d9ebfbff", MAC:"be:da:4a:e5:19:3b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:24.034740 env[1196]: 2025-07-10 00:39:24.032 [INFO][4130] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba" Namespace="calico-apiserver" Pod="calico-apiserver-5cd7f67fb4-8bxgr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:24.048626 env[1196]: time="2025-07-10T00:39:24.048554770Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:39:24.048793 env[1196]: time="2025-07-10T00:39:24.048601428Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:39:24.048793 env[1196]: time="2025-07-10T00:39:24.048611747Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:39:24.049052 env[1196]: time="2025-07-10T00:39:24.048985869Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba pid=4230 runtime=io.containerd.runc.v2 Jul 10 00:39:24.051000 audit[4240]: NETFILTER_CFG table=filter:116 family=2 entries=53 op=nft_register_chain pid=4240 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:24.051000 audit[4240]: SYSCALL arch=c000003e syscall=46 success=yes exit=26624 a0=3 a1=7ffef85feef0 a2=0 a3=7ffef85feedc items=0 ppid=3309 pid=4240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.051000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:24.066577 systemd[1]: Started cri-containerd-ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba.scope. Jul 10 00:39:24.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.076000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.076000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.076000 audit: BPF prog-id=193 op=LOAD Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4230 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162303334376338666336383634376464383563333430346531323131 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4230 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162303334376338666336383634376464383563333430346531323131 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit: BPF prog-id=194 op=LOAD Jul 10 00:39:24.077000 audit[4242]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0001ba350 items=0 ppid=4230 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162303334376338666336383634376464383563333430346531323131 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit: BPF prog-id=195 op=LOAD Jul 10 00:39:24.077000 audit[4242]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0001ba398 items=0 ppid=4230 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162303334376338666336383634376464383563333430346531323131 Jul 10 00:39:24.077000 audit: BPF prog-id=195 op=UNLOAD Jul 10 00:39:24.077000 audit: BPF prog-id=194 op=UNLOAD Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { perfmon } for pid=4242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit[4242]: AVC avc: denied { bpf } for pid=4242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.077000 audit: BPF prog-id=196 op=LOAD Jul 10 00:39:24.077000 audit[4242]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0001ba7a8 items=0 ppid=4230 pid=4242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162303334376338666336383634376464383563333430346531323131 Jul 10 00:39:24.079924 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:39:24.105139 env[1196]: time="2025-07-10T00:39:24.104819098Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5cd7f67fb4-8bxgr,Uid:dcbc48e0-8448-4980-ac86-8660732ecd60,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba\"" Jul 10 00:39:24.118676 systemd-networkd[1025]: cali6b87615f463: Link UP Jul 10 00:39:24.123263 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:39:24.123337 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6b87615f463: link becomes ready Jul 10 00:39:24.123433 systemd-networkd[1025]: cali6b87615f463: Gained carrier Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:23.950 [INFO][4142] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0 coredns-7c65d6cfc9- kube-system f8f65afc-561e-4d28-b1a1-4952487d5e88 1080 0 2025-07-10 00:38:43 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-jqbfq eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali6b87615f463 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jqbfq" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jqbfq-" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:23.950 [INFO][4142] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jqbfq" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:23.993 [INFO][4188] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" HandleID="k8s-pod-network.519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:23.993 [INFO][4188] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" HandleID="k8s-pod-network.519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0000c14e0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-jqbfq", "timestamp":"2025-07-10 00:39:23.993283175 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:23.993 [INFO][4188] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.013 [INFO][4188] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.013 [INFO][4188] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.085 [INFO][4188] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" host="localhost" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.092 [INFO][4188] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.096 [INFO][4188] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.097 [INFO][4188] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.100 [INFO][4188] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.100 [INFO][4188] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" host="localhost" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.102 [INFO][4188] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.106 [INFO][4188] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" host="localhost" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.113 [INFO][4188] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" host="localhost" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.113 [INFO][4188] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" host="localhost" Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.113 [INFO][4188] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:24.138014 env[1196]: 2025-07-10 00:39:24.113 [INFO][4188] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" HandleID="k8s-pod-network.519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:24.138627 env[1196]: 2025-07-10 00:39:24.115 [INFO][4142] cni-plugin/k8s.go 418: Populated endpoint ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jqbfq" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"f8f65afc-561e-4d28-b1a1-4952487d5e88", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-jqbfq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6b87615f463", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:24.138627 env[1196]: 2025-07-10 00:39:24.115 [INFO][4142] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jqbfq" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:24.138627 env[1196]: 2025-07-10 00:39:24.115 [INFO][4142] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6b87615f463 ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jqbfq" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:24.138627 env[1196]: 2025-07-10 00:39:24.127 [INFO][4142] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jqbfq" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:24.138627 env[1196]: 2025-07-10 00:39:24.127 [INFO][4142] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jqbfq" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"f8f65afc-561e-4d28-b1a1-4952487d5e88", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb", Pod:"coredns-7c65d6cfc9-jqbfq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6b87615f463", MAC:"ae:97:8e:11:02:a2", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:24.138627 env[1196]: 2025-07-10 00:39:24.135 [INFO][4142] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jqbfq" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:24.148000 audit[4285]: NETFILTER_CFG table=filter:117 family=2 entries=52 op=nft_register_chain pid=4285 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:39:24.150190 env[1196]: time="2025-07-10T00:39:24.149789465Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:39:24.150190 env[1196]: time="2025-07-10T00:39:24.149824200Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:39:24.150190 env[1196]: time="2025-07-10T00:39:24.149834149Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:39:24.150190 env[1196]: time="2025-07-10T00:39:24.150043773Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb pid=4286 runtime=io.containerd.runc.v2 Jul 10 00:39:24.148000 audit[4285]: SYSCALL arch=c000003e syscall=46 success=yes exit=23892 a0=3 a1=7ffc0b2d42d0 a2=0 a3=7ffc0b2d42bc items=0 ppid=3309 pid=4285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.148000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:39:24.161113 systemd[1]: Started cri-containerd-519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb.scope. Jul 10 00:39:24.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit: BPF prog-id=197 op=LOAD Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4286 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396466643530366364336466636163353065633364383639373666 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4286 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396466643530366364336466636163353065633364383639373666 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.170000 audit: BPF prog-id=198 op=LOAD Jul 10 00:39:24.170000 audit[4296]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000325a70 items=0 ppid=4286 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396466643530366364336466636163353065633364383639373666 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit: BPF prog-id=199 op=LOAD Jul 10 00:39:24.171000 audit[4296]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000325ab8 items=0 ppid=4286 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396466643530366364336466636163353065633364383639373666 Jul 10 00:39:24.171000 audit: BPF prog-id=199 op=UNLOAD Jul 10 00:39:24.171000 audit: BPF prog-id=198 op=UNLOAD Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { perfmon } for pid=4296 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit[4296]: AVC avc: denied { bpf } for pid=4296 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.171000 audit: BPF prog-id=200 op=LOAD Jul 10 00:39:24.171000 audit[4296]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000325ec8 items=0 ppid=4286 pid=4296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531396466643530366364336466636163353065633364383639373666 Jul 10 00:39:24.173064 systemd-resolved[1140]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:39:24.193818 env[1196]: time="2025-07-10T00:39:24.193757641Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jqbfq,Uid:f8f65afc-561e-4d28-b1a1-4952487d5e88,Namespace:kube-system,Attempt:1,} returns sandbox id \"519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb\"" Jul 10 00:39:24.194643 kubelet[1938]: E0710 00:39:24.194620 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:24.196468 env[1196]: time="2025-07-10T00:39:24.196441300Z" level=info msg="CreateContainer within sandbox \"519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:39:24.201105 systemd[1]: run-netns-cni\x2d8ad5f39a\x2d5539\x2d74eb\x2d256e\x2dd6067b09b91c.mount: Deactivated successfully. Jul 10 00:39:24.201189 systemd[1]: run-netns-cni\x2dc31596ae\x2d2f10\x2db243\x2d1d3e\x2d4bbde72ceb01.mount: Deactivated successfully. Jul 10 00:39:24.216432 env[1196]: time="2025-07-10T00:39:24.216381700Z" level=info msg="CreateContainer within sandbox \"519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"7d5f9a168153d906299fd2fe9ce980af30fab3eb26df255b3c00903abd6d7a1f\"" Jul 10 00:39:24.216881 env[1196]: time="2025-07-10T00:39:24.216833438Z" level=info msg="StartContainer for \"7d5f9a168153d906299fd2fe9ce980af30fab3eb26df255b3c00903abd6d7a1f\"" Jul 10 00:39:24.234500 systemd[1]: Started cri-containerd-7d5f9a168153d906299fd2fe9ce980af30fab3eb26df255b3c00903abd6d7a1f.scope. Jul 10 00:39:24.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit: BPF prog-id=201 op=LOAD Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4286 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764356639613136383135336439303632393966643266653963653938 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4286 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764356639613136383135336439303632393966643266653963653938 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit: BPF prog-id=202 op=LOAD Jul 10 00:39:24.244000 audit[4326]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a3110 items=0 ppid=4286 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764356639613136383135336439303632393966643266653963653938 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit: BPF prog-id=203 op=LOAD Jul 10 00:39:24.244000 audit[4326]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a3158 items=0 ppid=4286 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764356639613136383135336439303632393966643266653963653938 Jul 10 00:39:24.244000 audit: BPF prog-id=203 op=UNLOAD Jul 10 00:39:24.244000 audit: BPF prog-id=202 op=UNLOAD Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { perfmon } for pid=4326 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit[4326]: AVC avc: denied { bpf } for pid=4326 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:24.244000 audit: BPF prog-id=204 op=LOAD Jul 10 00:39:24.244000 audit[4326]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a3568 items=0 ppid=4286 pid=4326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764356639613136383135336439303632393966643266653963653938 Jul 10 00:39:24.258475 systemd-networkd[1025]: cali97bbb293f6b: Gained IPv6LL Jul 10 00:39:24.258695 systemd-networkd[1025]: calidfbb0bc868b: Gained IPv6LL Jul 10 00:39:24.337000 audit[4337]: AVC avc: denied { getattr } for pid=4337 comm="coredns" path="cgroup:[4026532719]" dev="nsfs" ino=4026532719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c12,c977 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:39:24.337000 audit[4337]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000586a08 a2=c0005a1898 a3=0 items=0 ppid=4286 pid=4337 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c12,c977 key=(null) Jul 10 00:39:24.337000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:39:24.439385 env[1196]: time="2025-07-10T00:39:24.439268667Z" level=info msg="StartContainer for \"7d5f9a168153d906299fd2fe9ce980af30fab3eb26df255b3c00903abd6d7a1f\" returns successfully" Jul 10 00:39:24.741176 kubelet[1938]: E0710 00:39:24.740788 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:24.752890 kubelet[1938]: I0710 00:39:24.751120 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-wv28v" podStartSLOduration=24.808113685 podStartE2EDuration="28.751100467s" podCreationTimestamp="2025-07-10 00:38:56 +0000 UTC" firstStartedPulling="2025-07-10 00:39:19.994712104 +0000 UTC m=+43.488338380" lastFinishedPulling="2025-07-10 00:39:23.937698886 +0000 UTC m=+47.431325162" observedRunningTime="2025-07-10 00:39:24.749605219 +0000 UTC m=+48.243231495" watchObservedRunningTime="2025-07-10 00:39:24.751100467 +0000 UTC m=+48.244726743" Jul 10 00:39:24.805000 audit[4373]: NETFILTER_CFG table=filter:118 family=2 entries=14 op=nft_register_rule pid=4373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:24.805000 audit[4373]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffdae69beb0 a2=0 a3=7ffdae69be9c items=0 ppid=2046 pid=4373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.805000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:24.813000 audit[4373]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=4373 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:24.813000 audit[4373]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffdae69beb0 a2=0 a3=7ffdae69be9c items=0 ppid=2046 pid=4373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.813000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:24.832000 audit[4383]: NETFILTER_CFG table=filter:120 family=2 entries=14 op=nft_register_rule pid=4383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:24.832000 audit[4383]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcd31d0a60 a2=0 a3=7ffcd31d0a4c items=0 ppid=2046 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.832000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:24.844000 audit[4383]: NETFILTER_CFG table=nat:121 family=2 entries=56 op=nft_register_chain pid=4383 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:24.844000 audit[4383]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffcd31d0a60 a2=0 a3=7ffcd31d0a4c items=0 ppid=2046 pid=4383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:24.844000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:25.195133 systemd[1]: run-containerd-runc-k8s.io-7d5f9a168153d906299fd2fe9ce980af30fab3eb26df255b3c00903abd6d7a1f-runc.5iCJYg.mount: Deactivated successfully. Jul 10 00:39:25.346024 systemd-networkd[1025]: cali8a1d9ebfbff: Gained IPv6LL Jul 10 00:39:25.745903 kubelet[1938]: E0710 00:39:25.742994 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:25.858057 systemd-networkd[1025]: cali6b87615f463: Gained IPv6LL Jul 10 00:39:26.056722 env[1196]: time="2025-07-10T00:39:26.056584938Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:26.059001 env[1196]: time="2025-07-10T00:39:26.058970467Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:26.060916 env[1196]: time="2025-07-10T00:39:26.060870244Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:26.062569 env[1196]: time="2025-07-10T00:39:26.062517317Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:26.063017 env[1196]: time="2025-07-10T00:39:26.062986048Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 10 00:39:26.064137 env[1196]: time="2025-07-10T00:39:26.064092606Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:39:26.064933 env[1196]: time="2025-07-10T00:39:26.064893319Z" level=info msg="CreateContainer within sandbox \"34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 10 00:39:26.080067 env[1196]: time="2025-07-10T00:39:26.080016899Z" level=info msg="CreateContainer within sandbox \"34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"f27d640c153a3e772025727eea3e37b045864abde6188edc0fc753e595c6c757\"" Jul 10 00:39:26.080674 env[1196]: time="2025-07-10T00:39:26.080625071Z" level=info msg="StartContainer for \"f27d640c153a3e772025727eea3e37b045864abde6188edc0fc753e595c6c757\"" Jul 10 00:39:26.095073 systemd[1]: Started cri-containerd-f27d640c153a3e772025727eea3e37b045864abde6188edc0fc753e595c6c757.scope. Jul 10 00:39:26.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.105000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.105000 audit: BPF prog-id=205 op=LOAD Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3539 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632376436343063313533613365373732303235373237656561336533 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3539 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632376436343063313533613365373732303235373237656561336533 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit: BPF prog-id=206 op=LOAD Jul 10 00:39:26.106000 audit[4420]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00029a1c0 items=0 ppid=3539 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632376436343063313533613365373732303235373237656561336533 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit: BPF prog-id=207 op=LOAD Jul 10 00:39:26.106000 audit[4420]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00029a208 items=0 ppid=3539 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632376436343063313533613365373732303235373237656561336533 Jul 10 00:39:26.106000 audit: BPF prog-id=207 op=UNLOAD Jul 10 00:39:26.106000 audit: BPF prog-id=206 op=UNLOAD Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { perfmon } for pid=4420 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit[4420]: AVC avc: denied { bpf } for pid=4420 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:26.106000 audit: BPF prog-id=208 op=LOAD Jul 10 00:39:26.106000 audit[4420]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00029a618 items=0 ppid=3539 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:26.106000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632376436343063313533613365373732303235373237656561336533 Jul 10 00:39:26.132612 env[1196]: time="2025-07-10T00:39:26.132545568Z" level=info msg="StartContainer for \"f27d640c153a3e772025727eea3e37b045864abde6188edc0fc753e595c6c757\" returns successfully" Jul 10 00:39:26.140000 audit[4431]: AVC avc: denied { search } for pid=4431 comm="nginx" name="crypto" dev="proc" ino=28839 scontext=system_u:system_r:svirt_lxc_net_t:s0:c136,c711 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 10 00:39:26.140000 audit[4431]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fdcb03d4728 a2=0 a3=0 items=0 ppid=3539 pid=4431 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c136,c711 key=(null) Jul 10 00:39:26.140000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 10 00:39:26.746434 kubelet[1938]: E0710 00:39:26.746388 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:28.429472 systemd[1]: Started sshd@9-10.0.0.42:22-10.0.0.1:59106.service. Jul 10 00:39:28.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.42:22-10.0.0.1:59106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:28.430447 kernel: kauditd_printk_skb: 502 callbacks suppressed Jul 10 00:39:28.430562 kernel: audit: type=1130 audit(1752107968.428:1359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.42:22-10.0.0.1:59106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:28.476319 kernel: audit: type=1101 audit(1752107968.467:1360): pid=4453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.476412 kernel: audit: type=1103 audit(1752107968.468:1361): pid=4453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.467000 audit[4453]: USER_ACCT pid=4453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.468000 audit[4453]: CRED_ACQ pid=4453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.469546 sshd[4453]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:28.476769 sshd[4453]: Accepted publickey for core from 10.0.0.1 port 59106 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:28.468000 audit[4453]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff32d86fd0 a2=3 a3=0 items=0 ppid=1 pid=4453 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:28.482902 kernel: audit: type=1006 audit(1752107968.468:1362): pid=4453 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 10 00:39:28.482941 kernel: audit: type=1300 audit(1752107968.468:1362): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff32d86fd0 a2=3 a3=0 items=0 ppid=1 pid=4453 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:28.484465 kernel: audit: type=1327 audit(1752107968.468:1362): proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:28.468000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:28.485852 systemd[1]: Started session-10.scope. Jul 10 00:39:28.486210 systemd-logind[1186]: New session 10 of user core. Jul 10 00:39:28.498497 kernel: audit: type=1105 audit(1752107968.489:1363): pid=4453 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.498558 kernel: audit: type=1103 audit(1752107968.490:1364): pid=4455 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.489000 audit[4453]: USER_START pid=4453 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.490000 audit[4455]: CRED_ACQ pid=4455 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.932174 sshd[4453]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:28.932000 audit[4453]: USER_END pid=4453 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.935555 systemd[1]: Started sshd@10-10.0.0.42:22-10.0.0.1:59112.service. Jul 10 00:39:28.938034 systemd[1]: sshd@9-10.0.0.42:22-10.0.0.1:59106.service: Deactivated successfully. Jul 10 00:39:28.943338 kernel: audit: type=1106 audit(1752107968.932:1365): pid=4453 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.943428 kernel: audit: type=1104 audit(1752107968.932:1366): pid=4453 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.932000 audit[4453]: CRED_DISP pid=4453 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:28.938564 systemd[1]: session-10.scope: Deactivated successfully. Jul 10 00:39:28.939473 systemd-logind[1186]: Session 10 logged out. Waiting for processes to exit. Jul 10 00:39:28.940265 systemd-logind[1186]: Removed session 10. Jul 10 00:39:28.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.42:22-10.0.0.1:59112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:28.937000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.42:22-10.0.0.1:59106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:29.373702 systemd[1]: run-containerd-runc-k8s.io-d1f2aca5fe5e6603d7dfbe19f10c0556a465f6ace4bf3c3294cc427b58292afb-runc.piaCtw.mount: Deactivated successfully. Jul 10 00:39:29.436180 env[1196]: time="2025-07-10T00:39:29.436122524Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:29.440714 env[1196]: time="2025-07-10T00:39:29.440645937Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:29.442555 env[1196]: time="2025-07-10T00:39:29.442507802Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:29.444678 env[1196]: time="2025-07-10T00:39:29.444619006Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:29.445034 env[1196]: time="2025-07-10T00:39:29.445009510Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 00:39:29.446833 env[1196]: time="2025-07-10T00:39:29.446806484Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 10 00:39:29.447596 env[1196]: time="2025-07-10T00:39:29.447553877Z" level=info msg="CreateContainer within sandbox \"09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:39:29.461368 kubelet[1938]: I0710 00:39:29.458367 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-jqbfq" podStartSLOduration=46.458345488 podStartE2EDuration="46.458345488s" podCreationTimestamp="2025-07-10 00:38:43 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:39:24.763293507 +0000 UTC m=+48.256919783" watchObservedRunningTime="2025-07-10 00:39:29.458345488 +0000 UTC m=+52.951971764" Jul 10 00:39:29.467632 env[1196]: time="2025-07-10T00:39:29.464830815Z" level=info msg="CreateContainer within sandbox \"09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"604eeb72b69a5b986fd12a175047911fa0ebd8c0f41335dd11b9134ce7402bb8\"" Jul 10 00:39:29.467632 env[1196]: time="2025-07-10T00:39:29.465949545Z" level=info msg="StartContainer for \"604eeb72b69a5b986fd12a175047911fa0ebd8c0f41335dd11b9134ce7402bb8\"" Jul 10 00:39:29.489118 systemd[1]: Started cri-containerd-604eeb72b69a5b986fd12a175047911fa0ebd8c0f41335dd11b9134ce7402bb8.scope. Jul 10 00:39:29.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit: BPF prog-id=209 op=LOAD Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3826 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:29.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630346565623732623639613562393836666431326131373530343739 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3826 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:29.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630346565623732623639613562393836666431326131373530343739 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit: BPF prog-id=210 op=LOAD Jul 10 00:39:29.503000 audit[4505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002a58b0 items=0 ppid=3826 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:29.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630346565623732623639613562393836666431326131373530343739 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.503000 audit: BPF prog-id=211 op=LOAD Jul 10 00:39:29.503000 audit[4505]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002a58f8 items=0 ppid=3826 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:29.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630346565623732623639613562393836666431326131373530343739 Jul 10 00:39:29.504000 audit: BPF prog-id=211 op=UNLOAD Jul 10 00:39:29.504000 audit: BPF prog-id=210 op=UNLOAD Jul 10 00:39:29.504000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.504000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.504000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.504000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.504000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.504000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.504000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.504000 audit[4505]: AVC avc: denied { perfmon } for pid=4505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.504000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.504000 audit[4505]: AVC avc: denied { bpf } for pid=4505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:29.504000 audit: BPF prog-id=212 op=LOAD Jul 10 00:39:29.504000 audit[4505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002a5d08 items=0 ppid=3826 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:29.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630346565623732623639613562393836666431326131373530343739 Jul 10 00:39:29.531171 env[1196]: time="2025-07-10T00:39:29.531123551Z" level=info msg="StartContainer for \"604eeb72b69a5b986fd12a175047911fa0ebd8c0f41335dd11b9134ce7402bb8\" returns successfully" Jul 10 00:39:29.679000 audit[4466]: USER_ACCT pid=4466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:29.680275 sshd[4466]: Accepted publickey for core from 10.0.0.1 port 59112 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:29.682000 audit[4466]: CRED_ACQ pid=4466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:29.682000 audit[4466]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0990cc90 a2=3 a3=0 items=0 ppid=1 pid=4466 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:29.682000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:29.683204 sshd[4466]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:29.686558 systemd-logind[1186]: New session 11 of user core. Jul 10 00:39:29.687302 systemd[1]: Started session-11.scope. Jul 10 00:39:29.690000 audit[4466]: USER_START pid=4466 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:29.691000 audit[4539]: CRED_ACQ pid=4539 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:29.834000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:29.834000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002b34570 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:39:29.834000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:39:29.834000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:29.834000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00041c120 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:39:29.834000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:39:29.860000 audit[4547]: NETFILTER_CFG table=filter:122 family=2 entries=14 op=nft_register_rule pid=4547 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:29.860000 audit[4547]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff69f44d40 a2=0 a3=7fff69f44d2c items=0 ppid=2046 pid=4547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:29.860000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:29.865000 audit[4547]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=4547 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:29.865000 audit[4547]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff69f44d40 a2=0 a3=7fff69f44d2c items=0 ppid=2046 pid=4547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:29.865000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:29.898389 sshd[4466]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:29.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.42:22-10.0.0.1:59126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:29.902887 systemd[1]: Started sshd@11-10.0.0.42:22-10.0.0.1:59126.service. Jul 10 00:39:29.904000 audit[4466]: USER_END pid=4466 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:29.904000 audit[4466]: CRED_DISP pid=4466 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:29.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.42:22-10.0.0.1:59112 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:29.907061 systemd[1]: sshd@10-10.0.0.42:22-10.0.0.1:59112.service: Deactivated successfully. Jul 10 00:39:29.907771 systemd[1]: session-11.scope: Deactivated successfully. Jul 10 00:39:29.910171 systemd-logind[1186]: Session 11 logged out. Waiting for processes to exit. Jul 10 00:39:29.912416 systemd-logind[1186]: Removed session 11. Jul 10 00:39:29.939000 audit[4549]: USER_ACCT pid=4549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:29.940576 sshd[4549]: Accepted publickey for core from 10.0.0.1 port 59126 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:29.940000 audit[4549]: CRED_ACQ pid=4549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:29.940000 audit[4549]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff3af89f70 a2=3 a3=0 items=0 ppid=1 pid=4549 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:29.940000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:29.941576 sshd[4549]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:29.944667 systemd-logind[1186]: New session 12 of user core. Jul 10 00:39:29.945455 systemd[1]: Started session-12.scope. Jul 10 00:39:29.948000 audit[4549]: USER_START pid=4549 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:29.949000 audit[4552]: CRED_ACQ pid=4552 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:30.064261 sshd[4549]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:30.065000 audit[4549]: USER_END pid=4549 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:30.065000 audit[4549]: CRED_DISP pid=4549 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:30.067534 systemd[1]: sshd@11-10.0.0.42:22-10.0.0.1:59126.service: Deactivated successfully. Jul 10 00:39:30.068274 systemd[1]: session-12.scope: Deactivated successfully. Jul 10 00:39:30.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.42:22-10.0.0.1:59126 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:30.069027 systemd-logind[1186]: Session 12 logged out. Waiting for processes to exit. Jul 10 00:39:30.069791 systemd-logind[1186]: Removed session 12. Jul 10 00:39:30.370000 audit[4516]: AVC avc: denied { watch } for pid=4516 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_39_07.532868375/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c651,c877 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c651,c877 tclass=file permissive=0 Jul 10 00:39:30.370000 audit[4516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000c94220 a2=fc6 a3=0 items=0 ppid=3826 pid=4516 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c651,c877 key=(null) Jul 10 00:39:30.370000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:39:30.387822 kubelet[1938]: I0710 00:39:30.387755 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5cd7f67fb4-k4g4b" podStartSLOduration=30.206861634 podStartE2EDuration="37.387738865s" podCreationTimestamp="2025-07-10 00:38:53 +0000 UTC" firstStartedPulling="2025-07-10 00:39:22.265423684 +0000 UTC m=+45.759049960" lastFinishedPulling="2025-07-10 00:39:29.446300915 +0000 UTC m=+52.939927191" observedRunningTime="2025-07-10 00:39:29.837704341 +0000 UTC m=+53.331330637" watchObservedRunningTime="2025-07-10 00:39:30.387738865 +0000 UTC m=+53.881365131" Jul 10 00:39:30.401000 audit[4563]: NETFILTER_CFG table=filter:124 family=2 entries=13 op=nft_register_rule pid=4563 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:30.401000 audit[4563]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd56e2d430 a2=0 a3=7ffd56e2d41c items=0 ppid=2046 pid=4563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:30.401000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:30.407000 audit[4563]: NETFILTER_CFG table=nat:125 family=2 entries=27 op=nft_register_chain pid=4563 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:30.407000 audit[4563]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffd56e2d430 a2=0 a3=7ffd56e2d41c items=0 ppid=2046 pid=4563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:30.407000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:31.024000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:31.024000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:31.024000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c00ef63f20 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:39:31.024000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c00cdcc600 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:39:31.024000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:39:31.024000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:31.024000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:39:31.024000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00cffe990 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:39:31.024000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:39:31.025000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:31.025000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c00cf2ec00 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:39:31.025000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:39:31.029000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:31.029000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00f527f20 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:39:31.029000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:39:31.029000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:31.029000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00c56e840 a2=fc6 a3=0 items=0 ppid=1661 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c890,c975 key=(null) Jul 10 00:39:31.029000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:39:34.198074 env[1196]: time="2025-07-10T00:39:34.198019608Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:34.199876 env[1196]: time="2025-07-10T00:39:34.199833663Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:34.201406 env[1196]: time="2025-07-10T00:39:34.201358666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:34.202594 env[1196]: time="2025-07-10T00:39:34.202561734Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:34.203032 env[1196]: time="2025-07-10T00:39:34.202981161Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 10 00:39:34.204015 env[1196]: time="2025-07-10T00:39:34.203991287Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 10 00:39:34.216278 env[1196]: time="2025-07-10T00:39:34.216237064Z" level=info msg="CreateContainer within sandbox \"ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 10 00:39:34.229371 env[1196]: time="2025-07-10T00:39:34.229336604Z" level=info msg="CreateContainer within sandbox \"ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"5f1cc70efadc5cc866dfbe1733d2cbaabac40a3dd1e03a50985b3a7d5b71ba56\"" Jul 10 00:39:34.229831 env[1196]: time="2025-07-10T00:39:34.229802107Z" level=info msg="StartContainer for \"5f1cc70efadc5cc866dfbe1733d2cbaabac40a3dd1e03a50985b3a7d5b71ba56\"" Jul 10 00:39:34.245771 systemd[1]: Started cri-containerd-5f1cc70efadc5cc866dfbe1733d2cbaabac40a3dd1e03a50985b3a7d5b71ba56.scope. Jul 10 00:39:34.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258819 kernel: kauditd_printk_skb: 119 callbacks suppressed Jul 10 00:39:34.258915 kernel: audit: type=1400 audit(1752107974.256:1417): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.264594 kernel: audit: type=1400 audit(1752107974.256:1418): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.264650 kernel: audit: type=1400 audit(1752107974.256:1419): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.273946 kernel: audit: type=1400 audit(1752107974.256:1420): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.274153 kernel: audit: type=1400 audit(1752107974.256:1421): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.277068 kernel: audit: type=1400 audit(1752107974.256:1422): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.277117 kernel: audit: type=1400 audit(1752107974.256:1423): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.282602 kernel: audit: type=1400 audit(1752107974.256:1424): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.285398 kernel: audit: type=1400 audit(1752107974.256:1425): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.285423 kernel: audit: type=1400 audit(1752107974.257:1426): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.257000 audit: BPF prog-id=213 op=LOAD Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3982 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:34.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566316363373065666164633563633836366466626531373333643263 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3982 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:34.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566316363373065666164633563633836366466626531373333643263 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.258000 audit: BPF prog-id=214 op=LOAD Jul 10 00:39:34.258000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003c84f0 items=0 ppid=3982 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:34.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566316363373065666164633563633836366466626531373333643263 Jul 10 00:39:34.261000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.261000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.261000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.261000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.261000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.261000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.261000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.261000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.261000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.261000 audit: BPF prog-id=215 op=LOAD Jul 10 00:39:34.261000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003c8538 items=0 ppid=3982 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:34.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566316363373065666164633563633836366466626531373333643263 Jul 10 00:39:34.266000 audit: BPF prog-id=215 op=UNLOAD Jul 10 00:39:34.266000 audit: BPF prog-id=214 op=UNLOAD Jul 10 00:39:34.266000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.266000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.266000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.266000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.266000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.266000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.266000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.266000 audit[4581]: AVC avc: denied { perfmon } for pid=4581 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.266000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.266000 audit[4581]: AVC avc: denied { bpf } for pid=4581 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:34.266000 audit: BPF prog-id=216 op=LOAD Jul 10 00:39:34.266000 audit[4581]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c8948 items=0 ppid=3982 pid=4581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:34.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566316363373065666164633563633836366466626531373333643263 Jul 10 00:39:34.298435 env[1196]: time="2025-07-10T00:39:34.298394032Z" level=info msg="StartContainer for \"5f1cc70efadc5cc866dfbe1733d2cbaabac40a3dd1e03a50985b3a7d5b71ba56\" returns successfully" Jul 10 00:39:34.810712 kubelet[1938]: I0710 00:39:34.810162 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-77d569b777-mmjg7" podStartSLOduration=27.739850902 podStartE2EDuration="38.810143016s" podCreationTimestamp="2025-07-10 00:38:56 +0000 UTC" firstStartedPulling="2025-07-10 00:39:23.133423556 +0000 UTC m=+46.627049832" lastFinishedPulling="2025-07-10 00:39:34.20371567 +0000 UTC m=+57.697341946" observedRunningTime="2025-07-10 00:39:34.789713237 +0000 UTC m=+58.283339513" watchObservedRunningTime="2025-07-10 00:39:34.810143016 +0000 UTC m=+58.303769282" Jul 10 00:39:35.069612 systemd[1]: Started sshd@12-10.0.0.42:22-10.0.0.1:59138.service. Jul 10 00:39:35.068000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.42:22-10.0.0.1:59138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:35.103000 audit[4640]: USER_ACCT pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:35.104104 sshd[4640]: Accepted publickey for core from 10.0.0.1 port 59138 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:35.104000 audit[4640]: CRED_ACQ pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:35.104000 audit[4640]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc74663d10 a2=3 a3=0 items=0 ppid=1 pid=4640 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:35.104000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:35.105522 sshd[4640]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:35.110612 systemd[1]: Started session-13.scope. Jul 10 00:39:35.111122 systemd-logind[1186]: New session 13 of user core. Jul 10 00:39:35.116000 audit[4640]: USER_START pid=4640 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:35.118000 audit[4642]: CRED_ACQ pid=4642 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:35.353188 sshd[4640]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:35.353000 audit[4640]: USER_END pid=4640 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:35.353000 audit[4640]: CRED_DISP pid=4640 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:35.355877 systemd[1]: sshd@12-10.0.0.42:22-10.0.0.1:59138.service: Deactivated successfully. Jul 10 00:39:35.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.42:22-10.0.0.1:59138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:35.356588 systemd[1]: session-13.scope: Deactivated successfully. Jul 10 00:39:35.357106 systemd-logind[1186]: Session 13 logged out. Waiting for processes to exit. Jul 10 00:39:35.357815 systemd-logind[1186]: Removed session 13. Jul 10 00:39:36.008633 env[1196]: time="2025-07-10T00:39:36.008578444Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:36.010699 env[1196]: time="2025-07-10T00:39:36.010647929Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:36.012303 env[1196]: time="2025-07-10T00:39:36.012271055Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:36.014140 env[1196]: time="2025-07-10T00:39:36.014095790Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:36.014598 env[1196]: time="2025-07-10T00:39:36.014559311Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 10 00:39:36.015795 env[1196]: time="2025-07-10T00:39:36.015774261Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:39:36.017186 env[1196]: time="2025-07-10T00:39:36.017164149Z" level=info msg="CreateContainer within sandbox \"e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 10 00:39:36.044421 env[1196]: time="2025-07-10T00:39:36.044348634Z" level=info msg="CreateContainer within sandbox \"e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"773119aad0d42b8cd27f9d67bdd21994053c090f46458c50b9360bc12e60e417\"" Jul 10 00:39:36.045031 env[1196]: time="2025-07-10T00:39:36.044992914Z" level=info msg="StartContainer for \"773119aad0d42b8cd27f9d67bdd21994053c090f46458c50b9360bc12e60e417\"" Jul 10 00:39:36.071667 systemd[1]: Started cri-containerd-773119aad0d42b8cd27f9d67bdd21994053c090f46458c50b9360bc12e60e417.scope. Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7fd7dc05e698 items=0 ppid=4038 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:36.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737333131396161643064343262386364323766396436376264643231 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit: BPF prog-id=217 op=LOAD Jul 10 00:39:36.085000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000389eb8 items=0 ppid=4038 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:36.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737333131396161643064343262386364323766396436376264643231 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit: BPF prog-id=218 op=LOAD Jul 10 00:39:36.085000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c000389f08 items=0 ppid=4038 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:36.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737333131396161643064343262386364323766396436376264643231 Jul 10 00:39:36.085000 audit: BPF prog-id=218 op=UNLOAD Jul 10 00:39:36.085000 audit: BPF prog-id=217 op=UNLOAD Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { perfmon } for pid=4660 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit[4660]: AVC avc: denied { bpf } for pid=4660 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.085000 audit: BPF prog-id=219 op=LOAD Jul 10 00:39:36.085000 audit[4660]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000389f98 items=0 ppid=4038 pid=4660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:36.085000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3737333131396161643064343262386364323766396436376264643231 Jul 10 00:39:36.098090 env[1196]: time="2025-07-10T00:39:36.098051585Z" level=info msg="StartContainer for \"773119aad0d42b8cd27f9d67bdd21994053c090f46458c50b9360bc12e60e417\" returns successfully" Jul 10 00:39:36.375723 env[1196]: time="2025-07-10T00:39:36.375651257Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:36.377712 env[1196]: time="2025-07-10T00:39:36.377644128Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:36.379512 env[1196]: time="2025-07-10T00:39:36.379468762Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:36.381316 env[1196]: time="2025-07-10T00:39:36.381238955Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:36.381863 env[1196]: time="2025-07-10T00:39:36.381804045Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 00:39:36.384445 env[1196]: time="2025-07-10T00:39:36.384380442Z" level=info msg="CreateContainer within sandbox \"ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:39:36.385226 env[1196]: time="2025-07-10T00:39:36.385186214Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 10 00:39:36.398818 env[1196]: time="2025-07-10T00:39:36.398742649Z" level=info msg="CreateContainer within sandbox \"ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"b18a896dab46f69e30c6abc12c0ed5b02672436772ac4458451a9a2222ecf748\"" Jul 10 00:39:36.399486 env[1196]: time="2025-07-10T00:39:36.399458774Z" level=info msg="StartContainer for \"b18a896dab46f69e30c6abc12c0ed5b02672436772ac4458451a9a2222ecf748\"" Jul 10 00:39:36.416667 systemd[1]: Started cri-containerd-b18a896dab46f69e30c6abc12c0ed5b02672436772ac4458451a9a2222ecf748.scope. Jul 10 00:39:36.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.430000 audit: BPF prog-id=220 op=LOAD Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000119c48 a2=10 a3=1c items=0 ppid=4230 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:36.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231386138393664616234366636396533306336616263313263306564 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001196b0 a2=3c a3=8 items=0 ppid=4230 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:36.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231386138393664616234366636396533306336616263313263306564 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit: BPF prog-id=221 op=LOAD Jul 10 00:39:36.431000 audit[4697]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001199d8 a2=78 a3=c000352ea0 items=0 ppid=4230 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:36.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231386138393664616234366636396533306336616263313263306564 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit: BPF prog-id=222 op=LOAD Jul 10 00:39:36.431000 audit[4697]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000119770 a2=78 a3=c000352ee8 items=0 ppid=4230 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:36.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231386138393664616234366636396533306336616263313263306564 Jul 10 00:39:36.431000 audit: BPF prog-id=222 op=UNLOAD Jul 10 00:39:36.431000 audit: BPF prog-id=221 op=UNLOAD Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:36.431000 audit: BPF prog-id=223 op=LOAD Jul 10 00:39:36.431000 audit[4697]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000119c30 a2=78 a3=c0003532f8 items=0 ppid=4230 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:36.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231386138393664616234366636396533306336616263313263306564 Jul 10 00:39:36.801730 env[1196]: time="2025-07-10T00:39:36.800544357Z" level=info msg="StartContainer for \"b18a896dab46f69e30c6abc12c0ed5b02672436772ac4458451a9a2222ecf748\" returns successfully" Jul 10 00:39:36.863441 env[1196]: time="2025-07-10T00:39:36.863383386Z" level=info msg="StopPodSandbox for \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\"" Jul 10 00:39:36.998775 kubelet[1938]: I0710 00:39:36.998688 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5cd7f67fb4-8bxgr" podStartSLOduration=31.721901998 podStartE2EDuration="43.998656502s" podCreationTimestamp="2025-07-10 00:38:53 +0000 UTC" firstStartedPulling="2025-07-10 00:39:24.105988584 +0000 UTC m=+47.599614870" lastFinishedPulling="2025-07-10 00:39:36.382743098 +0000 UTC m=+59.876369374" observedRunningTime="2025-07-10 00:39:36.998107271 +0000 UTC m=+60.491733547" watchObservedRunningTime="2025-07-10 00:39:36.998656502 +0000 UTC m=+60.492282769" Jul 10 00:39:37.117000 audit[4758]: NETFILTER_CFG table=filter:126 family=2 entries=12 op=nft_register_rule pid=4758 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:37.117000 audit[4758]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff6cf218f0 a2=0 a3=7fff6cf218dc items=0 ppid=2046 pid=4758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:37.117000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:37.129000 audit[4758]: NETFILTER_CFG table=nat:127 family=2 entries=30 op=nft_register_rule pid=4758 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:37.129000 audit[4758]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fff6cf218f0 a2=0 a3=7fff6cf218dc items=0 ppid=2046 pid=4758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:37.129000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.112 [WARNING][4742] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--wv28v-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"9976c401-4bc0-4c73-b329-4a241a0db49c", ResourceVersion:"1101", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5", Pod:"goldmane-58fd7646b9-wv28v", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali4f45c9df2ba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.113 [INFO][4742] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.113 [INFO][4742] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" iface="eth0" netns="" Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.113 [INFO][4742] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.113 [INFO][4742] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.135 [INFO][4753] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" HandleID="k8s-pod-network.b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.135 [INFO][4753] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.135 [INFO][4753] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.140 [WARNING][4753] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" HandleID="k8s-pod-network.b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.140 [INFO][4753] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" HandleID="k8s-pod-network.b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.142 [INFO][4753] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:37.147534 env[1196]: 2025-07-10 00:39:37.145 [INFO][4742] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:37.148243 env[1196]: time="2025-07-10T00:39:37.147551509Z" level=info msg="TearDown network for sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\" successfully" Jul 10 00:39:37.148243 env[1196]: time="2025-07-10T00:39:37.147586154Z" level=info msg="StopPodSandbox for \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\" returns successfully" Jul 10 00:39:37.168991 env[1196]: time="2025-07-10T00:39:37.168948439Z" level=info msg="RemovePodSandbox for \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\"" Jul 10 00:39:37.169153 env[1196]: time="2025-07-10T00:39:37.168979968Z" level=info msg="Forcibly stopping sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\"" Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.221 [WARNING][4771] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--wv28v-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"9976c401-4bc0-4c73-b329-4a241a0db49c", ResourceVersion:"1101", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"879aaad8babd519150f6a7758c79afaa74cd004e8b6ece90006c87c02d8f19f5", Pod:"goldmane-58fd7646b9-wv28v", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali4f45c9df2ba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.221 [INFO][4771] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.221 [INFO][4771] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" iface="eth0" netns="" Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.221 [INFO][4771] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.221 [INFO][4771] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.240 [INFO][4779] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" HandleID="k8s-pod-network.b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.240 [INFO][4779] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.240 [INFO][4779] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.256 [WARNING][4779] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" HandleID="k8s-pod-network.b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.256 [INFO][4779] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" HandleID="k8s-pod-network.b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Workload="localhost-k8s-goldmane--58fd7646b9--wv28v-eth0" Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.258 [INFO][4779] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:37.261817 env[1196]: 2025-07-10 00:39:37.260 [INFO][4771] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde" Jul 10 00:39:37.262282 env[1196]: time="2025-07-10T00:39:37.261892910Z" level=info msg="TearDown network for sandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\" successfully" Jul 10 00:39:37.432776 env[1196]: time="2025-07-10T00:39:37.432645520Z" level=info msg="RemovePodSandbox \"b84054dda41486d9f30cb21d96da76cb40f17a046cac85063706d1b6f714fcde\" returns successfully" Jul 10 00:39:37.433513 env[1196]: time="2025-07-10T00:39:37.433448312Z" level=info msg="StopPodSandbox for \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\"" Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.471 [WARNING][4797] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0", GenerateName:"calico-apiserver-5cd7f67fb4-", Namespace:"calico-apiserver", SelfLink:"", UID:"c0b395d4-9441-4e9b-8858-23c201917aba", ResourceVersion:"1164", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cd7f67fb4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e", Pod:"calico-apiserver-5cd7f67fb4-k4g4b", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0e8b21b3f0c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.472 [INFO][4797] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.472 [INFO][4797] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" iface="eth0" netns="" Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.472 [INFO][4797] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.472 [INFO][4797] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.492 [INFO][4806] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" HandleID="k8s-pod-network.9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.492 [INFO][4806] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.492 [INFO][4806] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.509 [WARNING][4806] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" HandleID="k8s-pod-network.9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.509 [INFO][4806] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" HandleID="k8s-pod-network.9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.511 [INFO][4806] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:37.514597 env[1196]: 2025-07-10 00:39:37.512 [INFO][4797] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:37.515278 env[1196]: time="2025-07-10T00:39:37.515225406Z" level=info msg="TearDown network for sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\" successfully" Jul 10 00:39:37.515278 env[1196]: time="2025-07-10T00:39:37.515267375Z" level=info msg="StopPodSandbox for \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\" returns successfully" Jul 10 00:39:37.515939 env[1196]: time="2025-07-10T00:39:37.515895558Z" level=info msg="RemovePodSandbox for \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\"" Jul 10 00:39:37.516041 env[1196]: time="2025-07-10T00:39:37.515942036Z" level=info msg="Forcibly stopping sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\"" Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.576 [WARNING][4824] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0", GenerateName:"calico-apiserver-5cd7f67fb4-", Namespace:"calico-apiserver", SelfLink:"", UID:"c0b395d4-9441-4e9b-8858-23c201917aba", ResourceVersion:"1164", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cd7f67fb4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"09b45e10b52d9e06ff5ad7e8b0b50d7d197d66eed21689d3eb29f8b7519fbe9e", Pod:"calico-apiserver-5cd7f67fb4-k4g4b", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali0e8b21b3f0c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.576 [INFO][4824] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.576 [INFO][4824] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" iface="eth0" netns="" Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.576 [INFO][4824] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.576 [INFO][4824] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.596 [INFO][4833] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" HandleID="k8s-pod-network.9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.597 [INFO][4833] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.597 [INFO][4833] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.626 [WARNING][4833] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" HandleID="k8s-pod-network.9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.627 [INFO][4833] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" HandleID="k8s-pod-network.9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--k4g4b-eth0" Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.628 [INFO][4833] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:37.632055 env[1196]: 2025-07-10 00:39:37.630 [INFO][4824] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838" Jul 10 00:39:37.633452 env[1196]: time="2025-07-10T00:39:37.632088075Z" level=info msg="TearDown network for sandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\" successfully" Jul 10 00:39:37.721794 systemd[1]: run-containerd-runc-k8s.io-5f1cc70efadc5cc866dfbe1733d2cbaabac40a3dd1e03a50985b3a7d5b71ba56-runc.BWp6CN.mount: Deactivated successfully. Jul 10 00:39:37.785407 env[1196]: time="2025-07-10T00:39:37.785348200Z" level=info msg="RemovePodSandbox \"9f9c683d86a66b202631d85ec46e94dd726cd75b2e4c31c0a4adb3c30be96838\" returns successfully" Jul 10 00:39:37.786061 env[1196]: time="2025-07-10T00:39:37.786025857Z" level=info msg="StopPodSandbox for \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\"" Jul 10 00:39:37.809000 audit[4901]: NETFILTER_CFG table=filter:128 family=2 entries=11 op=nft_register_rule pid=4901 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:37.809000 audit[4901]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffeca568ed0 a2=0 a3=7ffeca568ebc items=0 ppid=2046 pid=4901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:37.809000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:37.818000 audit[4901]: NETFILTER_CFG table=nat:129 family=2 entries=29 op=nft_register_chain pid=4901 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:37.818000 audit[4901]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffeca568ed0 a2=0 a3=7ffeca568ebc items=0 ppid=2046 pid=4901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:37.818000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:37.885166 kubelet[1938]: I0710 00:39:37.884910 1938 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.835 [WARNING][4894] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zmrl9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e5aa62d9-8cf0-4934-8250-b0d96b853d89", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8", Pod:"csi-node-driver-zmrl9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidfbb0bc868b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.835 [INFO][4894] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.835 [INFO][4894] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" iface="eth0" netns="" Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.835 [INFO][4894] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.835 [INFO][4894] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.872 [INFO][4904] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" HandleID="k8s-pod-network.3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.872 [INFO][4904] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.872 [INFO][4904] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.879 [WARNING][4904] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" HandleID="k8s-pod-network.3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.879 [INFO][4904] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" HandleID="k8s-pod-network.3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.882 [INFO][4904] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:37.887395 env[1196]: 2025-07-10 00:39:37.885 [INFO][4894] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:37.887395 env[1196]: time="2025-07-10T00:39:37.887116714Z" level=info msg="TearDown network for sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\" successfully" Jul 10 00:39:37.887395 env[1196]: time="2025-07-10T00:39:37.887147913Z" level=info msg="StopPodSandbox for \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\" returns successfully" Jul 10 00:39:37.889608 env[1196]: time="2025-07-10T00:39:37.887622227Z" level=info msg="RemovePodSandbox for \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\"" Jul 10 00:39:37.889608 env[1196]: time="2025-07-10T00:39:37.887646863Z" level=info msg="Forcibly stopping sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\"" Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.920 [WARNING][4920] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zmrl9-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"e5aa62d9-8cf0-4934-8250-b0d96b853d89", ResourceVersion:"1070", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8", Pod:"csi-node-driver-zmrl9", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calidfbb0bc868b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.920 [INFO][4920] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.920 [INFO][4920] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" iface="eth0" netns="" Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.920 [INFO][4920] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.920 [INFO][4920] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.941 [INFO][4929] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" HandleID="k8s-pod-network.3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.941 [INFO][4929] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.942 [INFO][4929] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.948 [WARNING][4929] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" HandleID="k8s-pod-network.3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.948 [INFO][4929] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" HandleID="k8s-pod-network.3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Workload="localhost-k8s-csi--node--driver--zmrl9-eth0" Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.951 [INFO][4929] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:37.963572 env[1196]: 2025-07-10 00:39:37.957 [INFO][4920] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403" Jul 10 00:39:37.964313 env[1196]: time="2025-07-10T00:39:37.964262583Z" level=info msg="TearDown network for sandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\" successfully" Jul 10 00:39:37.969335 env[1196]: time="2025-07-10T00:39:37.969254898Z" level=info msg="RemovePodSandbox \"3d9bf1d6ac087281d61f5e3fe4ed22066484c6e922ed07c58e1a3081fdccc403\" returns successfully" Jul 10 00:39:37.969995 env[1196]: time="2025-07-10T00:39:37.969968253Z" level=info msg="StopPodSandbox for \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\"" Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:37.997 [WARNING][4949] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0", GenerateName:"calico-kube-controllers-77d569b777-", Namespace:"calico-system", SelfLink:"", UID:"fdf484de-e1cd-42c7-aa05-0614545158c1", ResourceVersion:"1188", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"77d569b777", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f", Pod:"calico-kube-controllers-77d569b777-mmjg7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali97bbb293f6b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:37.997 [INFO][4949] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:37.997 [INFO][4949] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" iface="eth0" netns="" Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:37.997 [INFO][4949] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:37.997 [INFO][4949] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:38.018 [INFO][4957] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" HandleID="k8s-pod-network.eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:38.018 [INFO][4957] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:38.018 [INFO][4957] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:38.024 [WARNING][4957] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" HandleID="k8s-pod-network.eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:38.024 [INFO][4957] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" HandleID="k8s-pod-network.eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:38.025 [INFO][4957] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:38.028501 env[1196]: 2025-07-10 00:39:38.026 [INFO][4949] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:38.028989 env[1196]: time="2025-07-10T00:39:38.028471090Z" level=info msg="TearDown network for sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\" successfully" Jul 10 00:39:38.028989 env[1196]: time="2025-07-10T00:39:38.028525797Z" level=info msg="StopPodSandbox for \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\" returns successfully" Jul 10 00:39:38.029361 env[1196]: time="2025-07-10T00:39:38.029324404Z" level=info msg="RemovePodSandbox for \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\"" Jul 10 00:39:38.029453 env[1196]: time="2025-07-10T00:39:38.029372317Z" level=info msg="Forcibly stopping sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\"" Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.062 [WARNING][4975] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0", GenerateName:"calico-kube-controllers-77d569b777-", Namespace:"calico-system", SelfLink:"", UID:"fdf484de-e1cd-42c7-aa05-0614545158c1", ResourceVersion:"1188", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"77d569b777", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ff3ca546e5c4c94c59399bb4df9e269890296719017eed061886f32b17ad928f", Pod:"calico-kube-controllers-77d569b777-mmjg7", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali97bbb293f6b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.063 [INFO][4975] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.063 [INFO][4975] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" iface="eth0" netns="" Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.063 [INFO][4975] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.063 [INFO][4975] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.083 [INFO][4984] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" HandleID="k8s-pod-network.eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.083 [INFO][4984] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.083 [INFO][4984] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.101 [WARNING][4984] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" HandleID="k8s-pod-network.eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.101 [INFO][4984] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" HandleID="k8s-pod-network.eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Workload="localhost-k8s-calico--kube--controllers--77d569b777--mmjg7-eth0" Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.102 [INFO][4984] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:38.105682 env[1196]: 2025-07-10 00:39:38.104 [INFO][4975] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91" Jul 10 00:39:38.106138 env[1196]: time="2025-07-10T00:39:38.105704717Z" level=info msg="TearDown network for sandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\" successfully" Jul 10 00:39:38.109723 env[1196]: time="2025-07-10T00:39:38.109672798Z" level=info msg="RemovePodSandbox \"eea257b53bd167bdadcbe8abadc6ec1ae600bcc7d911ba2cd8963914e9697c91\" returns successfully" Jul 10 00:39:38.110259 env[1196]: time="2025-07-10T00:39:38.110237713Z" level=info msg="StopPodSandbox for \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\"" Jul 10 00:39:38.155000 audit[4708]: AVC avc: denied { watch } for pid=4708 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_39_07.481779867/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c541,c720 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c541,c720 tclass=file permissive=0 Jul 10 00:39:38.155000 audit[4708]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00076be40 a2=fc6 a3=0 items=0 ppid=4230 pid=4708 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c541,c720 key=(null) Jul 10 00:39:38.155000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.163 [WARNING][5002] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" WorkloadEndpoint="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.163 [INFO][5002] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.163 [INFO][5002] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" iface="eth0" netns="" Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.163 [INFO][5002] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.163 [INFO][5002] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.183 [INFO][5013] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" HandleID="k8s-pod-network.efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Workload="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.183 [INFO][5013] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.183 [INFO][5013] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.188 [WARNING][5013] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" HandleID="k8s-pod-network.efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Workload="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.188 [INFO][5013] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" HandleID="k8s-pod-network.efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Workload="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.190 [INFO][5013] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:38.192816 env[1196]: 2025-07-10 00:39:38.191 [INFO][5002] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:38.193388 env[1196]: time="2025-07-10T00:39:38.192861947Z" level=info msg="TearDown network for sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\" successfully" Jul 10 00:39:38.193388 env[1196]: time="2025-07-10T00:39:38.192894560Z" level=info msg="StopPodSandbox for \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\" returns successfully" Jul 10 00:39:38.193479 env[1196]: time="2025-07-10T00:39:38.193398587Z" level=info msg="RemovePodSandbox for \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\"" Jul 10 00:39:38.193572 env[1196]: time="2025-07-10T00:39:38.193484895Z" level=info msg="Forcibly stopping sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\"" Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.225 [WARNING][5030] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" WorkloadEndpoint="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.225 [INFO][5030] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.225 [INFO][5030] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" iface="eth0" netns="" Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.225 [INFO][5030] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.225 [INFO][5030] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.248 [INFO][5038] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" HandleID="k8s-pod-network.efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Workload="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.249 [INFO][5038] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.249 [INFO][5038] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.254 [WARNING][5038] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" HandleID="k8s-pod-network.efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Workload="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.254 [INFO][5038] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" HandleID="k8s-pod-network.efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Workload="localhost-k8s-whisker--c8bcc675--dwv4n-eth0" Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.256 [INFO][5038] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:38.264209 env[1196]: 2025-07-10 00:39:38.259 [INFO][5030] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062" Jul 10 00:39:38.264688 env[1196]: time="2025-07-10T00:39:38.264230386Z" level=info msg="TearDown network for sandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\" successfully" Jul 10 00:39:38.268711 env[1196]: time="2025-07-10T00:39:38.268665663Z" level=info msg="RemovePodSandbox \"efc5f357e60aefaf0fb2f9690b802fca700ce8dd52d07e9aa713988ca14e4062\" returns successfully" Jul 10 00:39:38.270062 env[1196]: time="2025-07-10T00:39:38.270027071Z" level=info msg="StopPodSandbox for \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\"" Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.303 [WARNING][5056] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3999c732-217c-4b04-9aa6-4feadf6686cd", ResourceVersion:"1043", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699", Pod:"coredns-7c65d6cfc9-rrm9z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali950e473d7d5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.303 [INFO][5056] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.303 [INFO][5056] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" iface="eth0" netns="" Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.303 [INFO][5056] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.303 [INFO][5056] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.322 [INFO][5066] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" HandleID="k8s-pod-network.80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.322 [INFO][5066] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.322 [INFO][5066] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.328 [WARNING][5066] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" HandleID="k8s-pod-network.80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.328 [INFO][5066] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" HandleID="k8s-pod-network.80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.329 [INFO][5066] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:38.332285 env[1196]: 2025-07-10 00:39:38.330 [INFO][5056] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:38.332768 env[1196]: time="2025-07-10T00:39:38.332307256Z" level=info msg="TearDown network for sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\" successfully" Jul 10 00:39:38.332768 env[1196]: time="2025-07-10T00:39:38.332337866Z" level=info msg="StopPodSandbox for \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\" returns successfully" Jul 10 00:39:38.332817 env[1196]: time="2025-07-10T00:39:38.332777427Z" level=info msg="RemovePodSandbox for \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\"" Jul 10 00:39:38.332841 env[1196]: time="2025-07-10T00:39:38.332801334Z" level=info msg="Forcibly stopping sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\"" Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.610 [WARNING][5084] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3999c732-217c-4b04-9aa6-4feadf6686cd", ResourceVersion:"1043", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"92ef10cd2eb066934af28a5838d0d2491ab6a586fffc2f4fed8bbf69c1358699", Pod:"coredns-7c65d6cfc9-rrm9z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali950e473d7d5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.610 [INFO][5084] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.610 [INFO][5084] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" iface="eth0" netns="" Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.610 [INFO][5084] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.610 [INFO][5084] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.634 [INFO][5092] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" HandleID="k8s-pod-network.80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.634 [INFO][5092] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.634 [INFO][5092] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.640 [WARNING][5092] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" HandleID="k8s-pod-network.80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.640 [INFO][5092] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" HandleID="k8s-pod-network.80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Workload="localhost-k8s-coredns--7c65d6cfc9--rrm9z-eth0" Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.641 [INFO][5092] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:38.645686 env[1196]: 2025-07-10 00:39:38.643 [INFO][5084] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971" Jul 10 00:39:38.645686 env[1196]: time="2025-07-10T00:39:38.645634646Z" level=info msg="TearDown network for sandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\" successfully" Jul 10 00:39:38.650421 env[1196]: time="2025-07-10T00:39:38.650381657Z" level=info msg="RemovePodSandbox \"80743f1f9b6182945262ef6003d17f8838595dd364c86d0f328cb9503fd8a971\" returns successfully" Jul 10 00:39:38.650964 env[1196]: time="2025-07-10T00:39:38.650929960Z" level=info msg="StopPodSandbox for \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\"" Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.683 [WARNING][5112] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0", GenerateName:"calico-apiserver-5cd7f67fb4-", Namespace:"calico-apiserver", SelfLink:"", UID:"dcbc48e0-8448-4980-ac86-8660732ecd60", ResourceVersion:"1207", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cd7f67fb4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba", Pod:"calico-apiserver-5cd7f67fb4-8bxgr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8a1d9ebfbff", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.683 [INFO][5112] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.683 [INFO][5112] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" iface="eth0" netns="" Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.683 [INFO][5112] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.683 [INFO][5112] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.701 [INFO][5122] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" HandleID="k8s-pod-network.cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.701 [INFO][5122] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.701 [INFO][5122] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.708 [WARNING][5122] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" HandleID="k8s-pod-network.cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.708 [INFO][5122] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" HandleID="k8s-pod-network.cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.711 [INFO][5122] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:38.715245 env[1196]: 2025-07-10 00:39:38.713 [INFO][5112] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:38.715717 env[1196]: time="2025-07-10T00:39:38.715285848Z" level=info msg="TearDown network for sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\" successfully" Jul 10 00:39:38.715717 env[1196]: time="2025-07-10T00:39:38.715318381Z" level=info msg="StopPodSandbox for \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\" returns successfully" Jul 10 00:39:38.715891 env[1196]: time="2025-07-10T00:39:38.715839010Z" level=info msg="RemovePodSandbox for \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\"" Jul 10 00:39:38.715951 env[1196]: time="2025-07-10T00:39:38.715897473Z" level=info msg="Forcibly stopping sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\"" Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.745 [WARNING][5140] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0", GenerateName:"calico-apiserver-5cd7f67fb4-", Namespace:"calico-apiserver", SelfLink:"", UID:"dcbc48e0-8448-4980-ac86-8660732ecd60", ResourceVersion:"1207", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5cd7f67fb4", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ab0347c8fc68647dd85c3404e121111304de124d3c27ab567af6e8cbaf1986ba", Pod:"calico-apiserver-5cd7f67fb4-8bxgr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8a1d9ebfbff", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.746 [INFO][5140] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.746 [INFO][5140] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" iface="eth0" netns="" Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.746 [INFO][5140] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.746 [INFO][5140] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.767 [INFO][5148] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" HandleID="k8s-pod-network.cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.767 [INFO][5148] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.767 [INFO][5148] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.775 [WARNING][5148] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" HandleID="k8s-pod-network.cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.775 [INFO][5148] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" HandleID="k8s-pod-network.cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Workload="localhost-k8s-calico--apiserver--5cd7f67fb4--8bxgr-eth0" Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.777 [INFO][5148] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:38.785054 env[1196]: 2025-07-10 00:39:38.779 [INFO][5140] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14" Jul 10 00:39:38.785528 env[1196]: time="2025-07-10T00:39:38.785094545Z" level=info msg="TearDown network for sandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\" successfully" Jul 10 00:39:38.789672 env[1196]: time="2025-07-10T00:39:38.789584557Z" level=info msg="RemovePodSandbox \"cc24bc5531766f72d51d5db68c39f19373dea5b34c801beb11d229e149483c14\" returns successfully" Jul 10 00:39:38.790204 env[1196]: time="2025-07-10T00:39:38.790168418Z" level=info msg="StopPodSandbox for \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\"" Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.828 [WARNING][5165] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"f8f65afc-561e-4d28-b1a1-4952487d5e88", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb", Pod:"coredns-7c65d6cfc9-jqbfq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6b87615f463", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.829 [INFO][5165] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.829 [INFO][5165] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" iface="eth0" netns="" Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.829 [INFO][5165] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.829 [INFO][5165] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.847 [INFO][5174] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" HandleID="k8s-pod-network.b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.847 [INFO][5174] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.847 [INFO][5174] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.854 [WARNING][5174] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" HandleID="k8s-pod-network.b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.854 [INFO][5174] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" HandleID="k8s-pod-network.b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.855 [INFO][5174] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:38.859642 env[1196]: 2025-07-10 00:39:38.857 [INFO][5165] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:38.860259 env[1196]: time="2025-07-10T00:39:38.859656413Z" level=info msg="TearDown network for sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\" successfully" Jul 10 00:39:38.860259 env[1196]: time="2025-07-10T00:39:38.859689558Z" level=info msg="StopPodSandbox for \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\" returns successfully" Jul 10 00:39:38.860319 env[1196]: time="2025-07-10T00:39:38.860262898Z" level=info msg="RemovePodSandbox for \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\"" Jul 10 00:39:38.860355 env[1196]: time="2025-07-10T00:39:38.860298898Z" level=info msg="Forcibly stopping sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\"" Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.925 [WARNING][5193] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"f8f65afc-561e-4d28-b1a1-4952487d5e88", ResourceVersion:"1104", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 38, 43, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"519dfd506cd3dfcac50ec3d86976facd2f7f1dd1585c32e0d6e020f51edc03fb", Pod:"coredns-7c65d6cfc9-jqbfq", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6b87615f463", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.925 [INFO][5193] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.925 [INFO][5193] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" iface="eth0" netns="" Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.925 [INFO][5193] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.925 [INFO][5193] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.946 [INFO][5202] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" HandleID="k8s-pod-network.b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.946 [INFO][5202] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.947 [INFO][5202] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.952 [WARNING][5202] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" HandleID="k8s-pod-network.b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.952 [INFO][5202] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" HandleID="k8s-pod-network.b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Workload="localhost-k8s-coredns--7c65d6cfc9--jqbfq-eth0" Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.953 [INFO][5202] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:39:38.957438 env[1196]: 2025-07-10 00:39:38.955 [INFO][5193] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb" Jul 10 00:39:38.957438 env[1196]: time="2025-07-10T00:39:38.957407385Z" level=info msg="TearDown network for sandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\" successfully" Jul 10 00:39:38.961153 env[1196]: time="2025-07-10T00:39:38.961123477Z" level=info msg="RemovePodSandbox \"b0c09c9ffbdb907617df94f94e52dc29085d158f6f36d9c70f58cb2a05786ebb\" returns successfully" Jul 10 00:39:39.600646 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1141719719.mount: Deactivated successfully. Jul 10 00:39:39.609743 env[1196]: time="2025-07-10T00:39:39.609692161Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:39.611501 env[1196]: time="2025-07-10T00:39:39.611449964Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:39.613242 env[1196]: time="2025-07-10T00:39:39.613214852Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:39.614699 env[1196]: time="2025-07-10T00:39:39.614670149Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:39.615088 env[1196]: time="2025-07-10T00:39:39.615058802Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 10 00:39:39.616438 env[1196]: time="2025-07-10T00:39:39.616397084Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 10 00:39:39.617990 env[1196]: time="2025-07-10T00:39:39.617928839Z" level=info msg="CreateContainer within sandbox \"34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 10 00:39:39.628736 env[1196]: time="2025-07-10T00:39:39.628695779Z" level=info msg="CreateContainer within sandbox \"34185bc545d7ee51a5cc50b29312a0932dc58265443d55089264c1d6ea560f1c\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"f5c5b94394a2787dcdf7b1786526b51d0bcc45a576f5031c6d7f92c2c37df695\"" Jul 10 00:39:39.629161 env[1196]: time="2025-07-10T00:39:39.629124519Z" level=info msg="StartContainer for \"f5c5b94394a2787dcdf7b1786526b51d0bcc45a576f5031c6d7f92c2c37df695\"" Jul 10 00:39:39.644908 systemd[1]: Started cri-containerd-f5c5b94394a2787dcdf7b1786526b51d0bcc45a576f5031c6d7f92c2c37df695.scope. Jul 10 00:39:39.657882 kernel: kauditd_printk_skb: 173 callbacks suppressed Jul 10 00:39:39.658127 kernel: audit: type=1400 audit(1752107979.655:1473): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.663867 kernel: audit: type=1400 audit(1752107979.655:1474): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.663912 kernel: audit: type=1400 audit(1752107979.655:1475): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669950 kernel: audit: type=1400 audit(1752107979.655:1476): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.670002 kernel: audit: type=1400 audit(1752107979.655:1477): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.675582 kernel: audit: type=1400 audit(1752107979.655:1478): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.675636 kernel: audit: type=1400 audit(1752107979.655:1479): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.655000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.681369 kernel: audit: type=1400 audit(1752107979.655:1480): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.655000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.684251 kernel: audit: type=1400 audit(1752107979.655:1481): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.684328 kernel: audit: type=1400 audit(1752107979.660:1482): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit: BPF prog-id=224 op=LOAD Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3539 pid=5217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:39.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635633562393433393461323738376463646637623137383635323662 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3539 pid=5217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:39.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635633562393433393461323738376463646637623137383635323662 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.660000 audit: BPF prog-id=225 op=LOAD Jul 10 00:39:39.660000 audit[5217]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001dfd10 items=0 ppid=3539 pid=5217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:39.660000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635633562393433393461323738376463646637623137383635323662 Jul 10 00:39:39.666000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.666000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.666000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.666000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.666000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.666000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.666000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.666000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.666000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.666000 audit: BPF prog-id=226 op=LOAD Jul 10 00:39:39.666000 audit[5217]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001dfd58 items=0 ppid=3539 pid=5217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:39.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635633562393433393461323738376463646637623137383635323662 Jul 10 00:39:39.669000 audit: BPF prog-id=226 op=UNLOAD Jul 10 00:39:39.669000 audit: BPF prog-id=225 op=UNLOAD Jul 10 00:39:39.669000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669000 audit[5217]: AVC avc: denied { perfmon } for pid=5217 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669000 audit[5217]: AVC avc: denied { bpf } for pid=5217 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:39.669000 audit: BPF prog-id=227 op=LOAD Jul 10 00:39:39.669000 audit[5217]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003d8168 items=0 ppid=3539 pid=5217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:39.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635633562393433393461323738376463646637623137383635323662 Jul 10 00:39:39.717704 env[1196]: time="2025-07-10T00:39:39.717643755Z" level=info msg="StartContainer for \"f5c5b94394a2787dcdf7b1786526b51d0bcc45a576f5031c6d7f92c2c37df695\" returns successfully" Jul 10 00:39:39.918000 audit[5249]: NETFILTER_CFG table=filter:130 family=2 entries=9 op=nft_register_rule pid=5249 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:39.918000 audit[5249]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe4cb69c80 a2=0 a3=7ffe4cb69c6c items=0 ppid=2046 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:39.918000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:39.923000 audit[5249]: NETFILTER_CFG table=nat:131 family=2 entries=31 op=nft_register_chain pid=5249 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:39.923000 audit[5249]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffe4cb69c80 a2=0 a3=7ffe4cb69c6c items=0 ppid=2046 pid=5249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:39.923000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:40.351000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:40.351000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018b6900 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:39:40.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:39:40.351000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:40.351000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001d88d20 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:39:40.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:39:40.357925 systemd[1]: Started sshd@13-10.0.0.42:22-10.0.0.1:32864.service. Jul 10 00:39:40.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.42:22-10.0.0.1:32864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:40.370000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:40.370000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001bd8100 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:39:40.370000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:39:40.370000 audit[1774]: AVC avc: denied { watch } for pid=1774 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:39:40.370000 audit[1774]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001751aa0 a2=fc6 a3=0 items=0 ppid=1631 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c550,c666 key=(null) Jul 10 00:39:40.370000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:39:40.450000 audit[5251]: USER_ACCT pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:40.451464 sshd[5251]: Accepted publickey for core from 10.0.0.1 port 32864 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:40.451000 audit[5251]: CRED_ACQ pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:40.451000 audit[5251]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff48b18630 a2=3 a3=0 items=0 ppid=1 pid=5251 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:40.451000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:40.452598 sshd[5251]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:40.456245 systemd-logind[1186]: New session 14 of user core. Jul 10 00:39:40.457236 systemd[1]: Started session-14.scope. Jul 10 00:39:40.461000 audit[5251]: USER_START pid=5251 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:40.462000 audit[5261]: CRED_ACQ pid=5261 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:40.814420 sshd[5251]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:40.814000 audit[5251]: USER_END pid=5251 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:40.814000 audit[5251]: CRED_DISP pid=5251 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:40.816371 systemd[1]: sshd@13-10.0.0.42:22-10.0.0.1:32864.service: Deactivated successfully. Jul 10 00:39:40.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.42:22-10.0.0.1:32864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:40.817095 systemd[1]: session-14.scope: Deactivated successfully. Jul 10 00:39:40.817506 systemd-logind[1186]: Session 14 logged out. Waiting for processes to exit. Jul 10 00:39:40.818108 systemd-logind[1186]: Removed session 14. Jul 10 00:39:42.527069 env[1196]: time="2025-07-10T00:39:42.527002341Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:42.529720 env[1196]: time="2025-07-10T00:39:42.529680494Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:42.531426 env[1196]: time="2025-07-10T00:39:42.531378424Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:42.533103 env[1196]: time="2025-07-10T00:39:42.533072826Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:39:42.533548 env[1196]: time="2025-07-10T00:39:42.533520571Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 10 00:39:42.535929 env[1196]: time="2025-07-10T00:39:42.535901730Z" level=info msg="CreateContainer within sandbox \"e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 10 00:39:42.550353 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2345611833.mount: Deactivated successfully. Jul 10 00:39:42.553533 env[1196]: time="2025-07-10T00:39:42.553486315Z" level=info msg="CreateContainer within sandbox \"e96609197778b396c038016d36469082027805aba4184b9a4f56aeb6108879b8\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"1919fb71d27dde2e2d434cd28df8fc03f6c9bd3a0e053bd1efc8aa79646a8f7f\"" Jul 10 00:39:42.553995 env[1196]: time="2025-07-10T00:39:42.553975070Z" level=info msg="StartContainer for \"1919fb71d27dde2e2d434cd28df8fc03f6c9bd3a0e053bd1efc8aa79646a8f7f\"" Jul 10 00:39:42.576559 systemd[1]: Started cri-containerd-1919fb71d27dde2e2d434cd28df8fc03f6c9bd3a0e053bd1efc8aa79646a8f7f.scope. Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f6994714a88 items=0 ppid=4038 pid=5281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:42.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139313966623731643237646465326532643433346364323864663866 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit: BPF prog-id=228 op=LOAD Jul 10 00:39:42.587000 audit[5281]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00022c718 items=0 ppid=4038 pid=5281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:42.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139313966623731643237646465326532643433346364323864663866 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit: BPF prog-id=229 op=LOAD Jul 10 00:39:42.587000 audit[5281]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00022c768 items=0 ppid=4038 pid=5281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:42.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139313966623731643237646465326532643433346364323864663866 Jul 10 00:39:42.587000 audit: BPF prog-id=229 op=UNLOAD Jul 10 00:39:42.587000 audit: BPF prog-id=228 op=UNLOAD Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { perfmon } for pid=5281 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit[5281]: AVC avc: denied { bpf } for pid=5281 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:39:42.587000 audit: BPF prog-id=230 op=LOAD Jul 10 00:39:42.587000 audit[5281]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00022c7f8 items=0 ppid=4038 pid=5281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:42.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139313966623731643237646465326532643433346364323864663866 Jul 10 00:39:42.825350 env[1196]: time="2025-07-10T00:39:42.824614998Z" level=info msg="StartContainer for \"1919fb71d27dde2e2d434cd28df8fc03f6c9bd3a0e053bd1efc8aa79646a8f7f\" returns successfully" Jul 10 00:39:42.847472 kubelet[1938]: I0710 00:39:42.847436 1938 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 10 00:39:42.847472 kubelet[1938]: I0710 00:39:42.847473 1938 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 10 00:39:43.166098 kubelet[1938]: I0710 00:39:43.165989 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-66bc86d877-trf56" podStartSLOduration=4.895202854 podStartE2EDuration="24.165966739s" podCreationTimestamp="2025-07-10 00:39:19 +0000 UTC" firstStartedPulling="2025-07-10 00:39:20.34536515 +0000 UTC m=+43.838991416" lastFinishedPulling="2025-07-10 00:39:39.616129025 +0000 UTC m=+63.109755301" observedRunningTime="2025-07-10 00:39:39.905162453 +0000 UTC m=+63.398788729" watchObservedRunningTime="2025-07-10 00:39:43.165966739 +0000 UTC m=+66.659593015" Jul 10 00:39:43.545059 systemd[1]: run-containerd-runc-k8s.io-1919fb71d27dde2e2d434cd28df8fc03f6c9bd3a0e053bd1efc8aa79646a8f7f-runc.N20wz5.mount: Deactivated successfully. Jul 10 00:39:45.820741 systemd[1]: Started sshd@14-10.0.0.42:22-10.0.0.1:32872.service. Jul 10 00:39:45.820000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.42:22-10.0.0.1:32872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:45.821903 kernel: kauditd_printk_skb: 119 callbacks suppressed Jul 10 00:39:45.821988 kernel: audit: type=1130 audit(1752107985.820:1512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.42:22-10.0.0.1:32872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:45.857000 audit[5318]: USER_ACCT pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:45.858753 sshd[5318]: Accepted publickey for core from 10.0.0.1 port 32872 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:45.860399 sshd[5318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:45.859000 audit[5318]: CRED_ACQ pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:45.864330 systemd-logind[1186]: New session 15 of user core. Jul 10 00:39:45.865386 systemd[1]: Started session-15.scope. Jul 10 00:39:45.866035 kernel: audit: type=1101 audit(1752107985.857:1513): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:45.866077 kernel: audit: type=1103 audit(1752107985.859:1514): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:45.868545 kernel: audit: type=1006 audit(1752107985.859:1515): pid=5318 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 10 00:39:45.868587 kernel: audit: type=1300 audit(1752107985.859:1515): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb4f85a60 a2=3 a3=0 items=0 ppid=1 pid=5318 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:45.859000 audit[5318]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb4f85a60 a2=3 a3=0 items=0 ppid=1 pid=5318 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:45.859000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:45.873831 kernel: audit: type=1327 audit(1752107985.859:1515): proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:45.873888 kernel: audit: type=1105 audit(1752107985.869:1516): pid=5318 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:45.869000 audit[5318]: USER_START pid=5318 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:45.870000 audit[5320]: CRED_ACQ pid=5320 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:45.882116 kernel: audit: type=1103 audit(1752107985.870:1517): pid=5320 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:46.084590 sshd[5318]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:46.084000 audit[5318]: USER_END pid=5318 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:46.087025 systemd[1]: sshd@14-10.0.0.42:22-10.0.0.1:32872.service: Deactivated successfully. Jul 10 00:39:46.087974 systemd[1]: session-15.scope: Deactivated successfully. Jul 10 00:39:46.088810 systemd-logind[1186]: Session 15 logged out. Waiting for processes to exit. Jul 10 00:39:46.089588 systemd-logind[1186]: Removed session 15. Jul 10 00:39:46.084000 audit[5318]: CRED_DISP pid=5318 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:46.094241 kernel: audit: type=1106 audit(1752107986.084:1518): pid=5318 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:46.094288 kernel: audit: type=1104 audit(1752107986.084:1519): pid=5318 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:46.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.42:22-10.0.0.1:32872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:46.730879 kubelet[1938]: E0710 00:39:46.730825 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:39:51.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.42:22-10.0.0.1:43526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:51.089255 systemd[1]: Started sshd@15-10.0.0.42:22-10.0.0.1:43526.service. Jul 10 00:39:51.090382 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:39:51.090472 kernel: audit: type=1130 audit(1752107991.087:1521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.42:22-10.0.0.1:43526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:51.119000 audit[5335]: USER_ACCT pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.121855 sshd[5335]: Accepted publickey for core from 10.0.0.1 port 43526 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:51.124436 sshd[5335]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:51.122000 audit[5335]: CRED_ACQ pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.127932 systemd-logind[1186]: New session 16 of user core. Jul 10 00:39:51.128680 systemd[1]: Started session-16.scope. Jul 10 00:39:51.129799 kernel: audit: type=1101 audit(1752107991.119:1522): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.129869 kernel: audit: type=1103 audit(1752107991.122:1523): pid=5335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.129902 kernel: audit: type=1006 audit(1752107991.122:1524): pid=5335 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 10 00:39:51.122000 audit[5335]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca82e12b0 a2=3 a3=0 items=0 ppid=1 pid=5335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:51.136500 kernel: audit: type=1300 audit(1752107991.122:1524): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca82e12b0 a2=3 a3=0 items=0 ppid=1 pid=5335 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:51.136547 kernel: audit: type=1327 audit(1752107991.122:1524): proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:51.122000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:51.131000 audit[5335]: USER_START pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.141811 kernel: audit: type=1105 audit(1752107991.131:1525): pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.141876 kernel: audit: type=1103 audit(1752107991.133:1526): pid=5337 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.133000 audit[5337]: CRED_ACQ pid=5337 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.238009 sshd[5335]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:51.236000 audit[5335]: USER_END pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.240058 systemd[1]: sshd@15-10.0.0.42:22-10.0.0.1:43526.service: Deactivated successfully. Jul 10 00:39:51.240793 systemd[1]: session-16.scope: Deactivated successfully. Jul 10 00:39:51.241291 systemd-logind[1186]: Session 16 logged out. Waiting for processes to exit. Jul 10 00:39:51.241899 systemd-logind[1186]: Removed session 16. Jul 10 00:39:51.237000 audit[5335]: CRED_DISP pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.246235 kernel: audit: type=1106 audit(1752107991.236:1527): pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.246285 kernel: audit: type=1104 audit(1752107991.237:1528): pid=5335 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:51.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.42:22-10.0.0.1:43526 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:56.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.42:22-10.0.0.1:56092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:56.243651 systemd[1]: Started sshd@16-10.0.0.42:22-10.0.0.1:56092.service. Jul 10 00:39:56.244772 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:39:56.244822 kernel: audit: type=1130 audit(1752107996.242:1530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.42:22-10.0.0.1:56092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:56.280000 audit[5349]: USER_ACCT pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.282196 sshd[5349]: Accepted publickey for core from 10.0.0.1 port 56092 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:56.285945 kernel: audit: type=1101 audit(1752107996.280:1531): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.285000 audit[5349]: CRED_ACQ pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.290165 sshd[5349]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:56.292614 kernel: audit: type=1103 audit(1752107996.285:1532): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.292674 kernel: audit: type=1006 audit(1752107996.285:1533): pid=5349 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 10 00:39:56.285000 audit[5349]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe356a4540 a2=3 a3=0 items=0 ppid=1 pid=5349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:56.296510 kernel: audit: type=1300 audit(1752107996.285:1533): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe356a4540 a2=3 a3=0 items=0 ppid=1 pid=5349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:56.285000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:56.298877 kernel: audit: type=1327 audit(1752107996.285:1533): proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:56.302467 systemd-logind[1186]: New session 17 of user core. Jul 10 00:39:56.303041 systemd[1]: Started session-17.scope. Jul 10 00:39:56.309000 audit[5349]: USER_START pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.310000 audit[5351]: CRED_ACQ pid=5351 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.317320 kernel: audit: type=1105 audit(1752107996.309:1534): pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.317371 kernel: audit: type=1103 audit(1752107996.310:1535): pid=5351 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.460118 sshd[5349]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:56.463344 systemd[1]: sshd@16-10.0.0.42:22-10.0.0.1:56092.service: Deactivated successfully. Jul 10 00:39:56.460000 audit[5349]: USER_END pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.463893 systemd[1]: session-17.scope: Deactivated successfully. Jul 10 00:39:56.464586 systemd-logind[1186]: Session 17 logged out. Waiting for processes to exit. Jul 10 00:39:56.465699 systemd[1]: Started sshd@17-10.0.0.42:22-10.0.0.1:56106.service. Jul 10 00:39:56.467177 systemd-logind[1186]: Removed session 17. Jul 10 00:39:56.460000 audit[5349]: CRED_DISP pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.470898 kernel: audit: type=1106 audit(1752107996.460:1536): pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.470960 kernel: audit: type=1104 audit(1752107996.460:1537): pid=5349 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.42:22-10.0.0.1:56092 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:56.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.42:22-10.0.0.1:56106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:56.495000 audit[5362]: USER_ACCT pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.496544 sshd[5362]: Accepted publickey for core from 10.0.0.1 port 56106 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:56.496000 audit[5362]: CRED_ACQ pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.496000 audit[5362]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc7ab26de0 a2=3 a3=0 items=0 ppid=1 pid=5362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:56.496000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:56.497676 sshd[5362]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:56.501235 systemd-logind[1186]: New session 18 of user core. Jul 10 00:39:56.502030 systemd[1]: Started session-18.scope. Jul 10 00:39:56.505000 audit[5362]: USER_START pid=5362 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.506000 audit[5364]: CRED_ACQ pid=5364 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.984199 sshd[5362]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:56.984000 audit[5362]: USER_END pid=5362 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.984000 audit[5362]: CRED_DISP pid=5362 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:56.987161 systemd[1]: sshd@17-10.0.0.42:22-10.0.0.1:56106.service: Deactivated successfully. Jul 10 00:39:56.987672 systemd[1]: session-18.scope: Deactivated successfully. Jul 10 00:39:56.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.42:22-10.0.0.1:56106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:56.988395 systemd-logind[1186]: Session 18 logged out. Waiting for processes to exit. Jul 10 00:39:56.989734 systemd[1]: Started sshd@18-10.0.0.42:22-10.0.0.1:56120.service. Jul 10 00:39:56.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.42:22-10.0.0.1:56120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:56.990554 systemd-logind[1186]: Removed session 18. Jul 10 00:39:57.022000 audit[5374]: USER_ACCT pid=5374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:57.023645 sshd[5374]: Accepted publickey for core from 10.0.0.1 port 56120 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:57.023000 audit[5374]: CRED_ACQ pid=5374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:57.023000 audit[5374]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc97d1760 a2=3 a3=0 items=0 ppid=1 pid=5374 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:57.023000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:57.024718 sshd[5374]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:57.028058 systemd-logind[1186]: New session 19 of user core. Jul 10 00:39:57.028863 systemd[1]: Started session-19.scope. Jul 10 00:39:57.031000 audit[5374]: USER_START pid=5374 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:57.033000 audit[5376]: CRED_ACQ pid=5376 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:58.960000 audit[5388]: NETFILTER_CFG table=filter:132 family=2 entries=20 op=nft_register_rule pid=5388 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:58.960000 audit[5388]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd2afc5520 a2=0 a3=7ffd2afc550c items=0 ppid=2046 pid=5388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:58.960000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:58.968000 audit[5388]: NETFILTER_CFG table=nat:133 family=2 entries=26 op=nft_register_rule pid=5388 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:58.968000 audit[5388]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd2afc5520 a2=0 a3=0 items=0 ppid=2046 pid=5388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:58.968000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:58.976339 sshd[5374]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:58.979581 systemd[1]: Started sshd@19-10.0.0.42:22-10.0.0.1:56130.service. Jul 10 00:39:58.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.42:22-10.0.0.1:56130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:58.979000 audit[5374]: USER_END pid=5374 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:58.979000 audit[5374]: CRED_DISP pid=5374 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:58.984618 systemd-logind[1186]: Session 19 logged out. Waiting for processes to exit. Jul 10 00:39:58.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.42:22-10.0.0.1:56120 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:58.984000 audit[5392]: NETFILTER_CFG table=filter:134 family=2 entries=32 op=nft_register_rule pid=5392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:58.984000 audit[5392]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffcb5afa870 a2=0 a3=7ffcb5afa85c items=0 ppid=2046 pid=5392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:58.984000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:58.985510 systemd[1]: sshd@18-10.0.0.42:22-10.0.0.1:56120.service: Deactivated successfully. Jul 10 00:39:58.986130 systemd[1]: session-19.scope: Deactivated successfully. Jul 10 00:39:58.986978 systemd-logind[1186]: Removed session 19. Jul 10 00:39:58.988000 audit[5392]: NETFILTER_CFG table=nat:135 family=2 entries=26 op=nft_register_rule pid=5392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:39:58.988000 audit[5392]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffcb5afa870 a2=0 a3=0 items=0 ppid=2046 pid=5392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:58.988000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:39:59.011000 audit[5391]: USER_ACCT pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.012888 sshd[5391]: Accepted publickey for core from 10.0.0.1 port 56130 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:59.012000 audit[5391]: CRED_ACQ pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.012000 audit[5391]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0137eab0 a2=3 a3=0 items=0 ppid=1 pid=5391 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:59.012000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:59.013995 sshd[5391]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:59.017460 systemd-logind[1186]: New session 20 of user core. Jul 10 00:39:59.018236 systemd[1]: Started session-20.scope. Jul 10 00:39:59.021000 audit[5391]: USER_START pid=5391 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.023000 audit[5395]: CRED_ACQ pid=5395 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.521613 sshd[5391]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:59.521000 audit[5391]: USER_END pid=5391 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.521000 audit[5391]: CRED_DISP pid=5391 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.524199 systemd[1]: sshd@19-10.0.0.42:22-10.0.0.1:56130.service: Deactivated successfully. Jul 10 00:39:59.524817 systemd[1]: session-20.scope: Deactivated successfully. Jul 10 00:39:59.523000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.42:22-10.0.0.1:56130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:59.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.42:22-10.0.0.1:56142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:59.526941 systemd[1]: Started sshd@20-10.0.0.42:22-10.0.0.1:56142.service. Jul 10 00:39:59.528140 systemd-logind[1186]: Session 20 logged out. Waiting for processes to exit. Jul 10 00:39:59.529576 systemd-logind[1186]: Removed session 20. Jul 10 00:39:59.560000 audit[5428]: USER_ACCT pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.561495 sshd[5428]: Accepted publickey for core from 10.0.0.1 port 56142 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:39:59.561000 audit[5428]: CRED_ACQ pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.561000 audit[5428]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda431f3c0 a2=3 a3=0 items=0 ppid=1 pid=5428 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:39:59.561000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:39:59.562646 sshd[5428]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:39:59.567010 systemd-logind[1186]: New session 21 of user core. Jul 10 00:39:59.567531 systemd[1]: Started session-21.scope. Jul 10 00:39:59.571000 audit[5428]: USER_START pid=5428 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.572000 audit[5430]: CRED_ACQ pid=5430 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.696310 sshd[5428]: pam_unix(sshd:session): session closed for user core Jul 10 00:39:59.696000 audit[5428]: USER_END pid=5428 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.696000 audit[5428]: CRED_DISP pid=5428 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:39:59.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.42:22-10.0.0.1:56142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:39:59.699297 systemd[1]: sshd@20-10.0.0.42:22-10.0.0.1:56142.service: Deactivated successfully. Jul 10 00:39:59.700048 systemd[1]: session-21.scope: Deactivated successfully. Jul 10 00:39:59.700617 systemd-logind[1186]: Session 21 logged out. Waiting for processes to exit. Jul 10 00:39:59.701616 systemd-logind[1186]: Removed session 21. Jul 10 00:40:02.794574 kubelet[1938]: I0710 00:40:02.792303 1938 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:40:02.827948 kubelet[1938]: I0710 00:40:02.827868 1938 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-zmrl9" podStartSLOduration=47.707533184 podStartE2EDuration="1m6.82783275s" podCreationTimestamp="2025-07-10 00:38:56 +0000 UTC" firstStartedPulling="2025-07-10 00:39:23.414109661 +0000 UTC m=+46.907735937" lastFinishedPulling="2025-07-10 00:39:42.534409227 +0000 UTC m=+66.028035503" observedRunningTime="2025-07-10 00:39:43.166398211 +0000 UTC m=+66.660024487" watchObservedRunningTime="2025-07-10 00:40:02.82783275 +0000 UTC m=+86.321459026" Jul 10 00:40:02.842000 audit[5447]: NETFILTER_CFG table=filter:136 family=2 entries=32 op=nft_register_rule pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:40:02.844620 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 10 00:40:02.845186 kernel: audit: type=1325 audit(1752108002.842:1579): table=filter:136 family=2 entries=32 op=nft_register_rule pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:40:02.842000 audit[5447]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe47506a00 a2=0 a3=7ffe475069ec items=0 ppid=2046 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:02.851391 kernel: audit: type=1300 audit(1752108002.842:1579): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffe47506a00 a2=0 a3=7ffe475069ec items=0 ppid=2046 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:02.851445 kernel: audit: type=1327 audit(1752108002.842:1579): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:40:02.842000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:40:02.856000 audit[5447]: NETFILTER_CFG table=nat:137 family=2 entries=38 op=nft_register_chain pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:40:02.856000 audit[5447]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffe47506a00 a2=0 a3=7ffe475069ec items=0 ppid=2046 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:02.864365 kernel: audit: type=1325 audit(1752108002.856:1580): table=nat:137 family=2 entries=38 op=nft_register_chain pid=5447 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:40:02.864408 kernel: audit: type=1300 audit(1752108002.856:1580): arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffe47506a00 a2=0 a3=7ffe475069ec items=0 ppid=2046 pid=5447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:02.864429 kernel: audit: type=1327 audit(1752108002.856:1580): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:40:02.856000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:40:04.535000 audit[5451]: NETFILTER_CFG table=filter:138 family=2 entries=20 op=nft_register_rule pid=5451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:40:04.535000 audit[5451]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc8a1347e0 a2=0 a3=7ffc8a1347cc items=0 ppid=2046 pid=5451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:04.543820 kernel: audit: type=1325 audit(1752108004.535:1581): table=filter:138 family=2 entries=20 op=nft_register_rule pid=5451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:40:04.544313 kernel: audit: type=1300 audit(1752108004.535:1581): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc8a1347e0 a2=0 a3=7ffc8a1347cc items=0 ppid=2046 pid=5451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:04.544337 kernel: audit: type=1327 audit(1752108004.535:1581): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:40:04.535000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:40:04.550000 audit[5451]: NETFILTER_CFG table=nat:139 family=2 entries=110 op=nft_register_chain pid=5451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:40:04.550000 audit[5451]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffc8a1347e0 a2=0 a3=7ffc8a1347cc items=0 ppid=2046 pid=5451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:04.550000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:40:04.554886 kernel: audit: type=1325 audit(1752108004.550:1582): table=nat:139 family=2 entries=110 op=nft_register_chain pid=5451 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:40:04.700772 systemd[1]: Started sshd@21-10.0.0.42:22-10.0.0.1:56150.service. Jul 10 00:40:04.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.42:22-10.0.0.1:56150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:40:04.737000 audit[5454]: USER_ACCT pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:04.738230 sshd[5454]: Accepted publickey for core from 10.0.0.1 port 56150 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:40:04.738000 audit[5454]: CRED_ACQ pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:04.738000 audit[5454]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4fdc8e30 a2=3 a3=0 items=0 ppid=1 pid=5454 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:04.738000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:40:04.739327 sshd[5454]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:40:04.743531 systemd-logind[1186]: New session 22 of user core. Jul 10 00:40:04.743935 systemd[1]: Started session-22.scope. Jul 10 00:40:04.747000 audit[5454]: USER_START pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:04.748000 audit[5456]: CRED_ACQ pid=5456 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:04.915894 sshd[5454]: pam_unix(sshd:session): session closed for user core Jul 10 00:40:04.916000 audit[5454]: USER_END pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:04.916000 audit[5454]: CRED_DISP pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:04.918476 systemd[1]: sshd@21-10.0.0.42:22-10.0.0.1:56150.service: Deactivated successfully. Jul 10 00:40:04.919241 systemd[1]: session-22.scope: Deactivated successfully. Jul 10 00:40:04.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.42:22-10.0.0.1:56150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:40:04.919970 systemd-logind[1186]: Session 22 logged out. Waiting for processes to exit. Jul 10 00:40:04.920770 systemd-logind[1186]: Removed session 22. Jul 10 00:40:07.585315 kubelet[1938]: E0710 00:40:07.585269 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:40:08.585523 kubelet[1938]: E0710 00:40:08.585462 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:40:09.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.42:22-10.0.0.1:39278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:40:09.921153 systemd[1]: Started sshd@22-10.0.0.42:22-10.0.0.1:39278.service. Jul 10 00:40:09.922183 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 10 00:40:09.922280 kernel: audit: type=1130 audit(1752108009.920:1592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.42:22-10.0.0.1:39278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:40:09.952000 audit[5508]: USER_ACCT pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:09.955072 sshd[5508]: Accepted publickey for core from 10.0.0.1 port 39278 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:40:09.956000 audit[5508]: CRED_ACQ pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:09.958032 sshd[5508]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:40:09.961248 kernel: audit: type=1101 audit(1752108009.952:1593): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:09.961298 kernel: audit: type=1103 audit(1752108009.956:1594): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:09.963503 kernel: audit: type=1006 audit(1752108009.956:1595): pid=5508 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 10 00:40:09.962487 systemd[1]: Started session-23.scope. Jul 10 00:40:09.963520 systemd-logind[1186]: New session 23 of user core. Jul 10 00:40:09.956000 audit[5508]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffced7eb7d0 a2=3 a3=0 items=0 ppid=1 pid=5508 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:09.969157 kernel: audit: type=1300 audit(1752108009.956:1595): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffced7eb7d0 a2=3 a3=0 items=0 ppid=1 pid=5508 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:09.969366 kernel: audit: type=1327 audit(1752108009.956:1595): proctitle=737368643A20636F7265205B707269765D Jul 10 00:40:09.969415 kernel: audit: type=1105 audit(1752108009.967:1596): pid=5508 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:09.956000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:40:09.967000 audit[5508]: USER_START pid=5508 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:09.977027 kernel: audit: type=1103 audit(1752108009.969:1597): pid=5510 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:09.969000 audit[5510]: CRED_ACQ pid=5510 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:10.111740 sshd[5508]: pam_unix(sshd:session): session closed for user core Jul 10 00:40:10.111000 audit[5508]: USER_END pid=5508 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:10.113620 systemd[1]: sshd@22-10.0.0.42:22-10.0.0.1:39278.service: Deactivated successfully. Jul 10 00:40:10.114322 systemd[1]: session-23.scope: Deactivated successfully. Jul 10 00:40:10.115026 systemd-logind[1186]: Session 23 logged out. Waiting for processes to exit. Jul 10 00:40:10.115603 systemd-logind[1186]: Removed session 23. Jul 10 00:40:10.111000 audit[5508]: CRED_DISP pid=5508 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:10.120269 kernel: audit: type=1106 audit(1752108010.111:1598): pid=5508 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:10.120323 kernel: audit: type=1104 audit(1752108010.111:1599): pid=5508 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:10.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.42:22-10.0.0.1:39278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:40:12.585125 kubelet[1938]: E0710 00:40:12.585044 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:40:15.115312 systemd[1]: Started sshd@23-10.0.0.42:22-10.0.0.1:39288.service. Jul 10 00:40:15.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.42:22-10.0.0.1:39288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:40:15.133692 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:40:15.133961 kernel: audit: type=1130 audit(1752108015.114:1601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.42:22-10.0.0.1:39288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:40:15.165000 audit[5544]: USER_ACCT pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.166288 sshd[5544]: Accepted publickey for core from 10.0.0.1 port 39288 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:40:15.169000 audit[5544]: CRED_ACQ pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.170566 sshd[5544]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:40:15.198399 kernel: audit: type=1101 audit(1752108015.165:1602): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.198465 kernel: audit: type=1103 audit(1752108015.169:1603): pid=5544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.198486 kernel: audit: type=1006 audit(1752108015.169:1604): pid=5544 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 10 00:40:15.198500 kernel: audit: type=1300 audit(1752108015.169:1604): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe33b55490 a2=3 a3=0 items=0 ppid=1 pid=5544 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:15.198518 kernel: audit: type=1327 audit(1752108015.169:1604): proctitle=737368643A20636F7265205B707269765D Jul 10 00:40:15.198536 kernel: audit: type=1105 audit(1752108015.177:1605): pid=5544 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.198559 kernel: audit: type=1103 audit(1752108015.178:1606): pid=5546 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.169000 audit[5544]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe33b55490 a2=3 a3=0 items=0 ppid=1 pid=5544 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:15.169000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:40:15.177000 audit[5544]: USER_START pid=5544 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.178000 audit[5546]: CRED_ACQ pid=5546 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.174099 systemd-logind[1186]: New session 24 of user core. Jul 10 00:40:15.174884 systemd[1]: Started session-24.scope. Jul 10 00:40:15.301459 sshd[5544]: pam_unix(sshd:session): session closed for user core Jul 10 00:40:15.301000 audit[5544]: USER_END pid=5544 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.304492 systemd[1]: sshd@23-10.0.0.42:22-10.0.0.1:39288.service: Deactivated successfully. Jul 10 00:40:15.305227 systemd[1]: session-24.scope: Deactivated successfully. Jul 10 00:40:15.305837 systemd-logind[1186]: Session 24 logged out. Waiting for processes to exit. Jul 10 00:40:15.306548 systemd-logind[1186]: Removed session 24. Jul 10 00:40:15.301000 audit[5544]: CRED_DISP pid=5544 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.310346 kernel: audit: type=1106 audit(1752108015.301:1607): pid=5544 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.310422 kernel: audit: type=1104 audit(1752108015.301:1608): pid=5544 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:15.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.42:22-10.0.0.1:39288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:40:19.585623 kubelet[1938]: E0710 00:40:19.585578 1938 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:40:20.307882 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:40:20.307996 kernel: audit: type=1130 audit(1752108020.304:1610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.42:22-10.0.0.1:50188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:40:20.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.42:22-10.0.0.1:50188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:40:20.306443 systemd[1]: Started sshd@24-10.0.0.42:22-10.0.0.1:50188.service. Jul 10 00:40:20.337000 audit[5579]: USER_ACCT pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.339373 sshd[5579]: Accepted publickey for core from 10.0.0.1 port 50188 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:40:20.342326 sshd[5579]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:40:20.347802 systemd[1]: Started session-25.scope. Jul 10 00:40:20.348890 systemd-logind[1186]: New session 25 of user core. Jul 10 00:40:20.340000 audit[5579]: CRED_ACQ pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.356493 kernel: audit: type=1101 audit(1752108020.337:1611): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.356616 kernel: audit: type=1103 audit(1752108020.340:1612): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.356663 kernel: audit: type=1006 audit(1752108020.340:1613): pid=5579 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 10 00:40:20.340000 audit[5579]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec31449f0 a2=3 a3=0 items=0 ppid=1 pid=5579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:20.362292 kernel: audit: type=1300 audit(1752108020.340:1613): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec31449f0 a2=3 a3=0 items=0 ppid=1 pid=5579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:40:20.362362 kernel: audit: type=1327 audit(1752108020.340:1613): proctitle=737368643A20636F7265205B707269765D Jul 10 00:40:20.340000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:40:20.354000 audit[5579]: USER_START pid=5579 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.368294 kernel: audit: type=1105 audit(1752108020.354:1614): pid=5579 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.368438 kernel: audit: type=1103 audit(1752108020.355:1615): pid=5581 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.355000 audit[5581]: CRED_ACQ pid=5581 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.471064 sshd[5579]: pam_unix(sshd:session): session closed for user core Jul 10 00:40:20.470000 audit[5579]: USER_END pid=5579 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.473758 systemd[1]: sshd@24-10.0.0.42:22-10.0.0.1:50188.service: Deactivated successfully. Jul 10 00:40:20.474421 systemd[1]: session-25.scope: Deactivated successfully. Jul 10 00:40:20.475295 systemd-logind[1186]: Session 25 logged out. Waiting for processes to exit. Jul 10 00:40:20.476127 systemd-logind[1186]: Removed session 25. Jul 10 00:40:20.470000 audit[5579]: CRED_DISP pid=5579 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.479953 kernel: audit: type=1106 audit(1752108020.470:1616): pid=5579 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.480011 kernel: audit: type=1104 audit(1752108020.470:1617): pid=5579 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:40:20.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.42:22-10.0.0.1:50188 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'