Jul 10 00:46:27.930840 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Wed Jul 9 23:09:45 -00 2025 Jul 10 00:46:27.930868 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:46:27.930881 kernel: BIOS-provided physical RAM map: Jul 10 00:46:27.930889 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 10 00:46:27.930896 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 10 00:46:27.930903 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 10 00:46:27.930912 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Jul 10 00:46:27.930919 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 10 00:46:27.930926 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 10 00:46:27.930935 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 10 00:46:27.930942 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Jul 10 00:46:27.930949 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 10 00:46:27.930956 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 10 00:46:27.930964 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 10 00:46:27.930974 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 10 00:46:27.930983 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 10 00:46:27.930991 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 10 00:46:27.930998 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 10 00:46:27.931010 kernel: NX (Execute Disable) protection: active Jul 10 00:46:27.931017 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Jul 10 00:46:27.931025 kernel: e820: update [mem 0x9b475018-0x9b47ec57] usable ==> usable Jul 10 00:46:27.931033 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Jul 10 00:46:27.931040 kernel: e820: update [mem 0x9b438018-0x9b474e57] usable ==> usable Jul 10 00:46:27.931048 kernel: extended physical RAM map: Jul 10 00:46:27.931056 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Jul 10 00:46:27.931065 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Jul 10 00:46:27.931073 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Jul 10 00:46:27.931081 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Jul 10 00:46:27.931088 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Jul 10 00:46:27.931096 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Jul 10 00:46:27.931103 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Jul 10 00:46:27.931111 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b438017] usable Jul 10 00:46:27.931119 kernel: reserve setup_data: [mem 0x000000009b438018-0x000000009b474e57] usable Jul 10 00:46:27.931126 kernel: reserve setup_data: [mem 0x000000009b474e58-0x000000009b475017] usable Jul 10 00:46:27.931134 kernel: reserve setup_data: [mem 0x000000009b475018-0x000000009b47ec57] usable Jul 10 00:46:27.931141 kernel: reserve setup_data: [mem 0x000000009b47ec58-0x000000009c8eefff] usable Jul 10 00:46:27.931151 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Jul 10 00:46:27.931158 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Jul 10 00:46:27.931166 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Jul 10 00:46:27.931174 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Jul 10 00:46:27.931185 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Jul 10 00:46:27.931193 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Jul 10 00:46:27.931202 kernel: reserve setup_data: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 10 00:46:27.931212 kernel: efi: EFI v2.70 by EDK II Jul 10 00:46:27.931220 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b673018 RNG=0x9cb73018 Jul 10 00:46:27.931228 kernel: random: crng init done Jul 10 00:46:27.931236 kernel: SMBIOS 2.8 present. Jul 10 00:46:27.931244 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Jul 10 00:46:27.931252 kernel: Hypervisor detected: KVM Jul 10 00:46:27.931260 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 10 00:46:27.931269 kernel: kvm-clock: cpu 0, msr 6019a001, primary cpu clock Jul 10 00:46:27.931277 kernel: kvm-clock: using sched offset of 5550513384 cycles Jul 10 00:46:27.931292 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 10 00:46:27.931301 kernel: tsc: Detected 2794.746 MHz processor Jul 10 00:46:27.931310 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 10 00:46:27.931318 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 10 00:46:27.931327 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Jul 10 00:46:27.931335 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 10 00:46:27.931344 kernel: Using GB pages for direct mapping Jul 10 00:46:27.931352 kernel: Secure boot disabled Jul 10 00:46:27.931361 kernel: ACPI: Early table checksum verification disabled Jul 10 00:46:27.932310 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Jul 10 00:46:27.932322 kernel: ACPI: XSDT 0x000000009CB7D0E8 000054 (v01 BOCHS BXPC 00000001 01000013) Jul 10 00:46:27.932331 kernel: ACPI: FACP 0x000000009CB79000 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:27.968527 kernel: ACPI: DSDT 0x000000009CB7A000 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:27.968546 kernel: ACPI: FACS 0x000000009CBDD000 000040 Jul 10 00:46:27.968556 kernel: ACPI: APIC 0x000000009CB78000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:27.968574 kernel: ACPI: HPET 0x000000009CB77000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:27.968587 kernel: ACPI: MCFG 0x000000009CB76000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:27.968596 kernel: ACPI: WAET 0x000000009CB75000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:46:27.968614 kernel: ACPI: BGRT 0x000000009CB74000 000038 (v01 INTEL EDK2 00000002 01000013) Jul 10 00:46:27.968622 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb79000-0x9cb790f3] Jul 10 00:46:27.968631 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7a000-0x9cb7c1b9] Jul 10 00:46:27.968639 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Jul 10 00:46:27.968648 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb78000-0x9cb7808f] Jul 10 00:46:27.968656 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb77000-0x9cb77037] Jul 10 00:46:27.968664 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cb76000-0x9cb7603b] Jul 10 00:46:27.968673 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb75000-0x9cb75027] Jul 10 00:46:27.968683 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb74000-0x9cb74037] Jul 10 00:46:27.968695 kernel: No NUMA configuration found Jul 10 00:46:27.968704 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Jul 10 00:46:27.968713 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Jul 10 00:46:27.968722 kernel: Zone ranges: Jul 10 00:46:27.968731 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 10 00:46:27.968739 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Jul 10 00:46:27.968748 kernel: Normal empty Jul 10 00:46:27.968756 kernel: Movable zone start for each node Jul 10 00:46:27.968765 kernel: Early memory node ranges Jul 10 00:46:27.968775 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Jul 10 00:46:27.968783 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Jul 10 00:46:27.968792 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Jul 10 00:46:27.968800 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Jul 10 00:46:27.968809 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Jul 10 00:46:27.968817 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Jul 10 00:46:27.968825 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Jul 10 00:46:27.968834 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 10 00:46:27.968842 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Jul 10 00:46:27.968850 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Jul 10 00:46:27.968860 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 10 00:46:27.968869 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Jul 10 00:46:27.968877 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Jul 10 00:46:27.968886 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Jul 10 00:46:27.968894 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 10 00:46:27.968903 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 10 00:46:27.968911 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 10 00:46:27.968920 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 10 00:46:27.968928 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 10 00:46:27.968939 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 10 00:46:27.968948 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 10 00:46:27.968957 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 10 00:46:27.968971 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 10 00:46:27.968982 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 10 00:46:27.968990 kernel: TSC deadline timer available Jul 10 00:46:27.968999 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 10 00:46:27.969007 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 10 00:46:27.969015 kernel: kvm-guest: setup PV sched yield Jul 10 00:46:27.969026 kernel: [mem 0xc0000000-0xffffffff] available for PCI devices Jul 10 00:46:27.969035 kernel: Booting paravirtualized kernel on KVM Jul 10 00:46:27.969049 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 10 00:46:27.969060 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 10 00:46:27.969069 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 10 00:46:27.969078 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 10 00:46:27.969088 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 10 00:46:27.969097 kernel: kvm-guest: setup async PF for cpu 0 Jul 10 00:46:27.969107 kernel: kvm-guest: stealtime: cpu 0, msr 9b21c0c0 Jul 10 00:46:27.969116 kernel: kvm-guest: PV spinlocks enabled Jul 10 00:46:27.969125 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 10 00:46:27.969134 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Jul 10 00:46:27.969145 kernel: Policy zone: DMA32 Jul 10 00:46:27.969155 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:46:27.969164 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 10 00:46:27.969173 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 10 00:46:27.969183 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 10 00:46:27.969192 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 10 00:46:27.969202 kernel: Memory: 2397432K/2567000K available (12295K kernel code, 2275K rwdata, 13724K rodata, 47472K init, 4108K bss, 169308K reserved, 0K cma-reserved) Jul 10 00:46:27.969211 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 10 00:46:27.969219 kernel: ftrace: allocating 34602 entries in 136 pages Jul 10 00:46:27.969228 kernel: ftrace: allocated 136 pages with 2 groups Jul 10 00:46:27.969234 kernel: rcu: Hierarchical RCU implementation. Jul 10 00:46:27.969242 kernel: rcu: RCU event tracing is enabled. Jul 10 00:46:27.969249 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 10 00:46:27.969257 kernel: Rude variant of Tasks RCU enabled. Jul 10 00:46:27.969265 kernel: Tracing variant of Tasks RCU enabled. Jul 10 00:46:27.969272 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 10 00:46:27.969279 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 10 00:46:27.969286 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 10 00:46:27.969292 kernel: Console: colour dummy device 80x25 Jul 10 00:46:27.969300 kernel: printk: console [ttyS0] enabled Jul 10 00:46:27.969307 kernel: ACPI: Core revision 20210730 Jul 10 00:46:27.969314 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 10 00:46:27.969323 kernel: APIC: Switch to symmetric I/O mode setup Jul 10 00:46:27.969332 kernel: x2apic enabled Jul 10 00:46:27.969341 kernel: Switched APIC routing to physical x2apic. Jul 10 00:46:27.969351 kernel: kvm-guest: setup PV IPIs Jul 10 00:46:27.969360 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 10 00:46:27.969369 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 10 00:46:27.969409 kernel: Calibrating delay loop (skipped) preset value.. 5589.49 BogoMIPS (lpj=2794746) Jul 10 00:46:27.970171 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 10 00:46:27.970188 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 10 00:46:27.970199 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 10 00:46:27.970210 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 10 00:46:27.970225 kernel: Spectre V2 : Mitigation: Retpolines Jul 10 00:46:27.970240 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 10 00:46:27.970255 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 10 00:46:27.970270 kernel: RETBleed: Mitigation: untrained return thunk Jul 10 00:46:27.970285 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 10 00:46:27.970301 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 10 00:46:27.970315 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 10 00:46:27.970324 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 10 00:46:27.970333 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 10 00:46:27.970342 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 10 00:46:27.970354 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 10 00:46:27.970364 kernel: Freeing SMP alternatives memory: 32K Jul 10 00:46:27.970391 kernel: pid_max: default: 32768 minimum: 301 Jul 10 00:46:27.970400 kernel: LSM: Security Framework initializing Jul 10 00:46:27.970409 kernel: SELinux: Initializing. Jul 10 00:46:27.970418 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:46:27.970430 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:46:27.970440 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 10 00:46:27.970449 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 10 00:46:27.970475 kernel: ... version: 0 Jul 10 00:46:27.970485 kernel: ... bit width: 48 Jul 10 00:46:27.970494 kernel: ... generic registers: 6 Jul 10 00:46:27.970503 kernel: ... value mask: 0000ffffffffffff Jul 10 00:46:27.970512 kernel: ... max period: 00007fffffffffff Jul 10 00:46:27.970521 kernel: ... fixed-purpose events: 0 Jul 10 00:46:27.970533 kernel: ... event mask: 000000000000003f Jul 10 00:46:27.970558 kernel: signal: max sigframe size: 1776 Jul 10 00:46:27.970579 kernel: rcu: Hierarchical SRCU implementation. Jul 10 00:46:27.970588 kernel: smp: Bringing up secondary CPUs ... Jul 10 00:46:27.970597 kernel: x86: Booting SMP configuration: Jul 10 00:46:27.970606 kernel: .... node #0, CPUs: #1 Jul 10 00:46:27.970616 kernel: kvm-clock: cpu 1, msr 6019a041, secondary cpu clock Jul 10 00:46:27.970625 kernel: kvm-guest: setup async PF for cpu 1 Jul 10 00:46:27.970651 kernel: kvm-guest: stealtime: cpu 1, msr 9b29c0c0 Jul 10 00:46:27.970663 kernel: #2 Jul 10 00:46:27.970671 kernel: kvm-clock: cpu 2, msr 6019a081, secondary cpu clock Jul 10 00:46:27.970678 kernel: kvm-guest: setup async PF for cpu 2 Jul 10 00:46:27.970685 kernel: kvm-guest: stealtime: cpu 2, msr 9b31c0c0 Jul 10 00:46:27.970692 kernel: #3 Jul 10 00:46:27.970712 kernel: kvm-clock: cpu 3, msr 6019a0c1, secondary cpu clock Jul 10 00:46:27.970720 kernel: kvm-guest: setup async PF for cpu 3 Jul 10 00:46:27.970727 kernel: kvm-guest: stealtime: cpu 3, msr 9b39c0c0 Jul 10 00:46:27.970734 kernel: smp: Brought up 1 node, 4 CPUs Jul 10 00:46:27.970747 kernel: smpboot: Max logical packages: 1 Jul 10 00:46:27.970754 kernel: smpboot: Total of 4 processors activated (22357.96 BogoMIPS) Jul 10 00:46:27.970761 kernel: devtmpfs: initialized Jul 10 00:46:27.970781 kernel: x86/mm: Memory block size: 128MB Jul 10 00:46:27.970789 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Jul 10 00:46:27.970796 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Jul 10 00:46:27.970803 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Jul 10 00:46:27.970810 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Jul 10 00:46:27.970817 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Jul 10 00:46:27.970839 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 10 00:46:27.970848 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 10 00:46:27.970855 kernel: pinctrl core: initialized pinctrl subsystem Jul 10 00:46:27.970861 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 10 00:46:27.970868 kernel: audit: initializing netlink subsys (disabled) Jul 10 00:46:27.970875 kernel: audit: type=2000 audit(1752108386.784:1): state=initialized audit_enabled=0 res=1 Jul 10 00:46:27.970883 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 10 00:46:27.970902 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 10 00:46:27.970911 kernel: cpuidle: using governor menu Jul 10 00:46:27.970923 kernel: ACPI: bus type PCI registered Jul 10 00:46:27.970932 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 10 00:46:27.970941 kernel: dca service started, version 1.12.1 Jul 10 00:46:27.970951 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 10 00:46:27.970961 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 10 00:46:27.970971 kernel: PCI: Using configuration type 1 for base access Jul 10 00:46:27.970981 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 10 00:46:27.970990 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 10 00:46:27.970998 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 10 00:46:27.971024 kernel: ACPI: Added _OSI(Module Device) Jul 10 00:46:27.971033 kernel: ACPI: Added _OSI(Processor Device) Jul 10 00:46:27.971040 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 10 00:46:27.971046 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 10 00:46:27.971053 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 10 00:46:27.971060 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 10 00:46:27.971067 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 10 00:46:27.971074 kernel: ACPI: Interpreter enabled Jul 10 00:46:27.971081 kernel: ACPI: PM: (supports S0 S3 S5) Jul 10 00:46:27.971090 kernel: ACPI: Using IOAPIC for interrupt routing Jul 10 00:46:27.971098 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 10 00:46:27.971104 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 10 00:46:27.971111 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 10 00:46:27.971283 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 10 00:46:27.971418 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 10 00:46:27.971571 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 10 00:46:27.971586 kernel: PCI host bridge to bus 0000:00 Jul 10 00:46:27.971704 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 10 00:46:27.971803 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 10 00:46:27.971909 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 10 00:46:27.972016 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 10 00:46:27.972153 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 10 00:46:27.972292 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0xfffffffff window] Jul 10 00:46:27.972472 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 10 00:46:27.972573 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 10 00:46:27.972684 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 10 00:46:27.972762 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Jul 10 00:46:27.972835 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xc1044000-0xc1044fff] Jul 10 00:46:27.972908 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Jul 10 00:46:27.972981 kernel: pci 0000:00:01.0: BAR 0: assigned to efifb Jul 10 00:46:27.973059 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 10 00:46:27.973162 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 10 00:46:27.973253 kernel: pci 0000:00:02.0: reg 0x10: [io 0x6100-0x611f] Jul 10 00:46:27.973329 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xc1043000-0xc1043fff] Jul 10 00:46:27.973422 kernel: pci 0000:00:02.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Jul 10 00:46:27.973521 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 10 00:46:27.973607 kernel: pci 0000:00:03.0: reg 0x10: [io 0x6000-0x607f] Jul 10 00:46:27.973710 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Jul 10 00:46:27.973789 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Jul 10 00:46:27.973873 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 10 00:46:27.973949 kernel: pci 0000:00:04.0: reg 0x10: [io 0x60e0-0x60ff] Jul 10 00:46:27.974029 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Jul 10 00:46:27.974118 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Jul 10 00:46:27.974199 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Jul 10 00:46:27.974353 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 10 00:46:27.974473 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 10 00:46:27.974560 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 10 00:46:27.974648 kernel: pci 0000:00:1f.2: reg 0x20: [io 0x60c0-0x60df] Jul 10 00:46:27.974722 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xc1040000-0xc1040fff] Jul 10 00:46:27.974822 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 10 00:46:27.974946 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x6080-0x60bf] Jul 10 00:46:27.974957 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 10 00:46:27.974964 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 10 00:46:27.974971 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 10 00:46:27.974978 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 10 00:46:27.974985 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 10 00:46:27.974992 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 10 00:46:27.975009 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 10 00:46:27.975019 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 10 00:46:27.975029 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 10 00:46:27.975036 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 10 00:46:27.975043 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 10 00:46:27.975050 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 10 00:46:27.975057 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 10 00:46:27.975064 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 10 00:46:27.975070 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 10 00:46:27.975077 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 10 00:46:27.975084 kernel: iommu: Default domain type: Translated Jul 10 00:46:27.975093 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 10 00:46:27.975175 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 10 00:46:27.975251 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 10 00:46:27.975344 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 10 00:46:27.975359 kernel: vgaarb: loaded Jul 10 00:46:27.975368 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 10 00:46:27.975389 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 10 00:46:27.975396 kernel: PTP clock support registered Jul 10 00:46:27.975406 kernel: Registered efivars operations Jul 10 00:46:27.975413 kernel: PCI: Using ACPI for IRQ routing Jul 10 00:46:27.975420 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 10 00:46:27.975426 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Jul 10 00:46:27.975434 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Jul 10 00:46:27.975440 kernel: e820: reserve RAM buffer [mem 0x9b438018-0x9bffffff] Jul 10 00:46:27.975447 kernel: e820: reserve RAM buffer [mem 0x9b475018-0x9bffffff] Jul 10 00:46:27.975454 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Jul 10 00:46:27.975461 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Jul 10 00:46:27.975469 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 10 00:46:27.975476 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 10 00:46:27.975483 kernel: clocksource: Switched to clocksource kvm-clock Jul 10 00:46:27.975490 kernel: VFS: Disk quotas dquot_6.6.0 Jul 10 00:46:27.975497 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 10 00:46:27.975504 kernel: pnp: PnP ACPI init Jul 10 00:46:27.975602 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 10 00:46:27.975613 kernel: pnp: PnP ACPI: found 6 devices Jul 10 00:46:27.975622 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 10 00:46:27.975629 kernel: NET: Registered PF_INET protocol family Jul 10 00:46:27.975636 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 10 00:46:27.975643 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 10 00:46:27.975650 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 10 00:46:27.975657 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 10 00:46:27.975664 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 10 00:46:27.975671 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 10 00:46:27.975678 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:46:27.975686 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:46:27.975693 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 10 00:46:27.975700 kernel: NET: Registered PF_XDP protocol family Jul 10 00:46:27.975777 kernel: pci 0000:00:04.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Jul 10 00:46:27.975852 kernel: pci 0000:00:04.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Jul 10 00:46:27.976854 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 10 00:46:27.976926 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 10 00:46:27.976993 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 10 00:46:27.977065 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 10 00:46:27.977158 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 10 00:46:27.977232 kernel: pci_bus 0000:00: resource 9 [mem 0x800000000-0xfffffffff window] Jul 10 00:46:27.977241 kernel: PCI: CLS 0 bytes, default 64 Jul 10 00:46:27.977249 kernel: Initialise system trusted keyrings Jul 10 00:46:27.977256 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 10 00:46:27.977263 kernel: Key type asymmetric registered Jul 10 00:46:27.977270 kernel: Asymmetric key parser 'x509' registered Jul 10 00:46:27.977277 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 10 00:46:27.977286 kernel: io scheduler mq-deadline registered Jul 10 00:46:27.977294 kernel: io scheduler kyber registered Jul 10 00:46:27.977309 kernel: io scheduler bfq registered Jul 10 00:46:27.977318 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 10 00:46:27.977326 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 10 00:46:27.977333 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 10 00:46:27.977341 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 10 00:46:27.977348 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 10 00:46:27.977355 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 10 00:46:27.977364 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 10 00:46:27.977385 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 10 00:46:27.977392 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 10 00:46:27.977400 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 10 00:46:27.977500 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 10 00:46:27.977581 kernel: rtc_cmos 00:04: registered as rtc0 Jul 10 00:46:27.977674 kernel: rtc_cmos 00:04: setting system clock to 2025-07-10T00:46:27 UTC (1752108387) Jul 10 00:46:27.977756 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 10 00:46:27.977766 kernel: efifb: probing for efifb Jul 10 00:46:27.977775 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Jul 10 00:46:27.977782 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Jul 10 00:46:27.977790 kernel: efifb: scrolling: redraw Jul 10 00:46:27.977797 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Jul 10 00:46:27.977804 kernel: Console: switching to colour frame buffer device 160x50 Jul 10 00:46:27.977811 kernel: fb0: EFI VGA frame buffer device Jul 10 00:46:27.977819 kernel: pstore: Registered efi as persistent store backend Jul 10 00:46:27.977827 kernel: NET: Registered PF_INET6 protocol family Jul 10 00:46:27.977835 kernel: Segment Routing with IPv6 Jul 10 00:46:27.977842 kernel: In-situ OAM (IOAM) with IPv6 Jul 10 00:46:27.977849 kernel: NET: Registered PF_PACKET protocol family Jul 10 00:46:27.977858 kernel: Key type dns_resolver registered Jul 10 00:46:27.977865 kernel: IPI shorthand broadcast: enabled Jul 10 00:46:27.977874 kernel: sched_clock: Marking stable (479003049, 123213281)->(618658959, -16442629) Jul 10 00:46:27.977881 kernel: registered taskstats version 1 Jul 10 00:46:27.977888 kernel: Loading compiled-in X.509 certificates Jul 10 00:46:27.977896 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: 6ebecdd7757c0df63fc51731f0b99957f4e4af16' Jul 10 00:46:27.977903 kernel: Key type .fscrypt registered Jul 10 00:46:27.977910 kernel: Key type fscrypt-provisioning registered Jul 10 00:46:27.977917 kernel: pstore: Using crash dump compression: deflate Jul 10 00:46:27.977925 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 10 00:46:27.977932 kernel: ima: Allocated hash algorithm: sha1 Jul 10 00:46:27.977941 kernel: ima: No architecture policies found Jul 10 00:46:27.977948 kernel: clk: Disabling unused clocks Jul 10 00:46:27.977955 kernel: Freeing unused kernel image (initmem) memory: 47472K Jul 10 00:46:27.977962 kernel: Write protecting the kernel read-only data: 28672k Jul 10 00:46:27.977969 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 10 00:46:27.977977 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K Jul 10 00:46:27.977984 kernel: Run /init as init process Jul 10 00:46:27.977991 kernel: with arguments: Jul 10 00:46:27.977998 kernel: /init Jul 10 00:46:27.978007 kernel: with environment: Jul 10 00:46:27.978014 kernel: HOME=/ Jul 10 00:46:27.978021 kernel: TERM=linux Jul 10 00:46:27.978028 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 10 00:46:27.978037 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:46:27.978046 systemd[1]: Detected virtualization kvm. Jul 10 00:46:27.978055 systemd[1]: Detected architecture x86-64. Jul 10 00:46:27.978062 systemd[1]: Running in initrd. Jul 10 00:46:27.978071 systemd[1]: No hostname configured, using default hostname. Jul 10 00:46:27.978079 systemd[1]: Hostname set to . Jul 10 00:46:27.978087 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:46:27.978094 systemd[1]: Queued start job for default target initrd.target. Jul 10 00:46:27.978102 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:46:27.978109 systemd[1]: Reached target cryptsetup.target. Jul 10 00:46:27.978117 systemd[1]: Reached target paths.target. Jul 10 00:46:27.978127 systemd[1]: Reached target slices.target. Jul 10 00:46:27.978139 systemd[1]: Reached target swap.target. Jul 10 00:46:27.978149 systemd[1]: Reached target timers.target. Jul 10 00:46:27.978161 systemd[1]: Listening on iscsid.socket. Jul 10 00:46:27.978188 systemd[1]: Listening on iscsiuio.socket. Jul 10 00:46:27.978198 systemd[1]: Listening on systemd-journald-audit.socket. Jul 10 00:46:27.978206 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 10 00:46:27.978214 systemd[1]: Listening on systemd-journald.socket. Jul 10 00:46:27.978221 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:46:27.978231 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:46:27.978239 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:46:27.978247 systemd[1]: Reached target sockets.target. Jul 10 00:46:27.978255 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:46:27.978263 systemd[1]: Finished network-cleanup.service. Jul 10 00:46:27.978270 systemd[1]: Starting systemd-fsck-usr.service... Jul 10 00:46:27.978278 systemd[1]: Starting systemd-journald.service... Jul 10 00:46:27.978286 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:46:27.978294 systemd[1]: Starting systemd-resolved.service... Jul 10 00:46:27.978303 systemd[1]: Starting systemd-vconsole-setup.service... Jul 10 00:46:27.978311 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:46:27.978318 systemd[1]: Finished systemd-fsck-usr.service. Jul 10 00:46:27.978327 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:46:27.978335 systemd[1]: Finished systemd-vconsole-setup.service. Jul 10 00:46:27.978343 kernel: audit: type=1130 audit(1752108387.931:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.978351 systemd[1]: Starting dracut-cmdline-ask.service... Jul 10 00:46:27.978359 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 10 00:46:27.978368 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:46:27.978437 kernel: audit: type=1130 audit(1752108387.977:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.978449 systemd-journald[197]: Journal started Jul 10 00:46:27.978492 systemd-journald[197]: Runtime Journal (/run/log/journal/ebee89e8de84472fab742c426c4c36a3) is 6.0M, max 48.4M, 42.4M free. Jul 10 00:46:27.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.925696 systemd-modules-load[198]: Inserted module 'overlay' Jul 10 00:46:27.986447 systemd[1]: Started systemd-journald.service. Jul 10 00:46:27.986469 kernel: Bridge firewalling registered Jul 10 00:46:27.986482 kernel: audit: type=1130 audit(1752108387.984:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.984339 systemd-modules-load[198]: Inserted module 'br_netfilter' Jul 10 00:46:27.988006 systemd-resolved[199]: Positive Trust Anchors: Jul 10 00:46:27.988016 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:46:27.988053 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:46:27.990383 systemd-resolved[199]: Defaulting to hostname 'linux'. Jul 10 00:46:27.990829 systemd[1]: Finished dracut-cmdline-ask.service. Jul 10 00:46:27.992985 systemd[1]: Starting dracut-cmdline.service... Jul 10 00:46:27.995359 systemd[1]: Started systemd-resolved.service. Jul 10 00:46:28.003168 kernel: audit: type=1130 audit(1752108387.991:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.003207 kernel: audit: type=1130 audit(1752108387.996:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:27.997018 systemd[1]: Reached target nss-lookup.target. Jul 10 00:46:28.004195 dracut-cmdline[215]: dracut-dracut-053 Jul 10 00:46:28.005443 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 00:46:28.011812 kernel: SCSI subsystem initialized Jul 10 00:46:28.024309 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 10 00:46:28.024363 kernel: device-mapper: uevent: version 1.0.3 Jul 10 00:46:28.024409 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 10 00:46:28.027024 systemd-modules-load[198]: Inserted module 'dm_multipath' Jul 10 00:46:28.027812 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:46:28.033939 kernel: audit: type=1130 audit(1752108388.028:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.029732 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:46:28.038835 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:46:28.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.043401 kernel: audit: type=1130 audit(1752108388.039:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.069422 kernel: Loading iSCSI transport class v2.0-870. Jul 10 00:46:28.086415 kernel: iscsi: registered transport (tcp) Jul 10 00:46:28.110420 kernel: iscsi: registered transport (qla4xxx) Jul 10 00:46:28.110496 kernel: QLogic iSCSI HBA Driver Jul 10 00:46:28.143952 systemd[1]: Finished dracut-cmdline.service. Jul 10 00:46:28.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.146334 systemd[1]: Starting dracut-pre-udev.service... Jul 10 00:46:28.149584 kernel: audit: type=1130 audit(1752108388.145:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.194402 kernel: raid6: avx2x4 gen() 24366 MB/s Jul 10 00:46:28.211403 kernel: raid6: avx2x4 xor() 7177 MB/s Jul 10 00:46:28.228399 kernel: raid6: avx2x2 gen() 26456 MB/s Jul 10 00:46:28.245399 kernel: raid6: avx2x2 xor() 15337 MB/s Jul 10 00:46:28.262396 kernel: raid6: avx2x1 gen() 20458 MB/s Jul 10 00:46:28.294415 kernel: raid6: avx2x1 xor() 13599 MB/s Jul 10 00:46:28.311396 kernel: raid6: sse2x4 gen() 11336 MB/s Jul 10 00:46:28.328397 kernel: raid6: sse2x4 xor() 5967 MB/s Jul 10 00:46:28.345398 kernel: raid6: sse2x2 gen() 13770 MB/s Jul 10 00:46:28.362405 kernel: raid6: sse2x2 xor() 7701 MB/s Jul 10 00:46:28.384403 kernel: raid6: sse2x1 gen() 9345 MB/s Jul 10 00:46:28.401865 kernel: raid6: sse2x1 xor() 6491 MB/s Jul 10 00:46:28.401899 kernel: raid6: using algorithm avx2x2 gen() 26456 MB/s Jul 10 00:46:28.401911 kernel: raid6: .... xor() 15337 MB/s, rmw enabled Jul 10 00:46:28.402560 kernel: raid6: using avx2x2 recovery algorithm Jul 10 00:46:28.457402 kernel: xor: automatically using best checksumming function avx Jul 10 00:46:28.550416 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 10 00:46:28.559950 systemd[1]: Finished dracut-pre-udev.service. Jul 10 00:46:28.564438 kernel: audit: type=1130 audit(1752108388.560:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.564000 audit: BPF prog-id=7 op=LOAD Jul 10 00:46:28.564000 audit: BPF prog-id=8 op=LOAD Jul 10 00:46:28.564839 systemd[1]: Starting systemd-udevd.service... Jul 10 00:46:28.577650 systemd-udevd[400]: Using default interface naming scheme 'v252'. Jul 10 00:46:28.581981 systemd[1]: Started systemd-udevd.service. Jul 10 00:46:28.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.583961 systemd[1]: Starting dracut-pre-trigger.service... Jul 10 00:46:28.597762 dracut-pre-trigger[407]: rd.md=0: removing MD RAID activation Jul 10 00:46:28.625069 systemd[1]: Finished dracut-pre-trigger.service. Jul 10 00:46:28.625000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.626658 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:46:28.665030 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:46:28.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:28.726551 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 10 00:46:28.748433 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 10 00:46:28.748451 kernel: cryptd: max_cpu_qlen set to 1000 Jul 10 00:46:28.748461 kernel: GPT:9289727 != 19775487 Jul 10 00:46:28.748470 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 10 00:46:28.748479 kernel: GPT:9289727 != 19775487 Jul 10 00:46:28.748487 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 10 00:46:28.748495 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:46:28.749394 kernel: libata version 3.00 loaded. Jul 10 00:46:28.757778 kernel: ahci 0000:00:1f.2: version 3.0 Jul 10 00:46:28.796599 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 10 00:46:28.796617 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 10 00:46:28.796720 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 10 00:46:28.796802 kernel: AVX2 version of gcm_enc/dec engaged. Jul 10 00:46:28.796812 kernel: AES CTR mode by8 optimization enabled Jul 10 00:46:28.796821 kernel: scsi host0: ahci Jul 10 00:46:28.796935 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (462) Jul 10 00:46:28.796945 kernel: scsi host1: ahci Jul 10 00:46:28.797036 kernel: scsi host2: ahci Jul 10 00:46:28.797126 kernel: scsi host3: ahci Jul 10 00:46:28.797213 kernel: scsi host4: ahci Jul 10 00:46:28.797302 kernel: scsi host5: ahci Jul 10 00:46:28.797421 kernel: ata1: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040100 irq 34 Jul 10 00:46:28.797431 kernel: ata2: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040180 irq 34 Jul 10 00:46:28.797444 kernel: ata3: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040200 irq 34 Jul 10 00:46:28.797453 kernel: ata4: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040280 irq 34 Jul 10 00:46:28.797463 kernel: ata5: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040300 irq 34 Jul 10 00:46:28.797472 kernel: ata6: SATA max UDMA/133 abar m4096@0xc1040000 port 0xc1040380 irq 34 Jul 10 00:46:28.776170 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 10 00:46:28.778187 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 10 00:46:28.787636 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 10 00:46:28.794204 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 10 00:46:28.800168 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:46:28.802206 systemd[1]: Starting disk-uuid.service... Jul 10 00:46:29.048443 disk-uuid[504]: Primary Header is updated. Jul 10 00:46:29.048443 disk-uuid[504]: Secondary Entries is updated. Jul 10 00:46:29.048443 disk-uuid[504]: Secondary Header is updated. Jul 10 00:46:29.052564 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:46:29.055400 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:46:29.058401 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:46:29.108405 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 10 00:46:29.108459 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 10 00:46:29.112395 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 10 00:46:29.113393 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 10 00:46:29.114411 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 10 00:46:29.115393 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 10 00:46:29.116519 kernel: ata3.00: applying bridge limits Jul 10 00:46:29.117398 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 10 00:46:29.118410 kernel: ata3.00: configured for UDMA/100 Jul 10 00:46:29.118473 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 10 00:46:29.152420 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 10 00:46:29.169994 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 10 00:46:29.170008 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 10 00:46:30.103343 disk-uuid[534]: The operation has completed successfully. Jul 10 00:46:30.104528 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:46:30.125625 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 10 00:46:30.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.125700 systemd[1]: Finished disk-uuid.service. Jul 10 00:46:30.131437 systemd[1]: Starting verity-setup.service... Jul 10 00:46:30.151398 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 10 00:46:30.168343 systemd[1]: Found device dev-mapper-usr.device. Jul 10 00:46:30.170729 systemd[1]: Mounting sysusr-usr.mount... Jul 10 00:46:30.172230 systemd[1]: Finished verity-setup.service. Jul 10 00:46:30.171000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.228402 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 10 00:46:30.228868 systemd[1]: Mounted sysusr-usr.mount. Jul 10 00:46:30.229387 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 10 00:46:30.229995 systemd[1]: Starting ignition-setup.service... Jul 10 00:46:30.232027 systemd[1]: Starting parse-ip-for-networkd.service... Jul 10 00:46:30.239839 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 00:46:30.239872 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:46:30.239882 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:46:30.248797 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 10 00:46:30.260296 systemd[1]: Finished ignition-setup.service. Jul 10 00:46:30.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.261419 systemd[1]: Starting ignition-fetch-offline.service... Jul 10 00:46:30.298263 ignition[653]: Ignition 2.14.0 Jul 10 00:46:30.298277 ignition[653]: Stage: fetch-offline Jul 10 00:46:30.298358 ignition[653]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:30.298367 ignition[653]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:30.298479 ignition[653]: parsed url from cmdline: "" Jul 10 00:46:30.298483 ignition[653]: no config URL provided Jul 10 00:46:30.298487 ignition[653]: reading system config file "/usr/lib/ignition/user.ign" Jul 10 00:46:30.298496 ignition[653]: no config at "/usr/lib/ignition/user.ign" Jul 10 00:46:30.298529 ignition[653]: op(1): [started] loading QEMU firmware config module Jul 10 00:46:30.298535 ignition[653]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 10 00:46:30.307517 ignition[653]: op(1): [finished] loading QEMU firmware config module Jul 10 00:46:30.307673 systemd[1]: Finished parse-ip-for-networkd.service. Jul 10 00:46:30.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.309000 audit: BPF prog-id=9 op=LOAD Jul 10 00:46:30.310713 systemd[1]: Starting systemd-networkd.service... Jul 10 00:46:30.347873 ignition[653]: parsing config with SHA512: 4fcb6254d83470d675f985ffe5357abf8140d739f48c0e5ef7d23081e0897bd1675df33888b23d93eac49f1836b096abf595e8a9d4e2eb8f6608595ec1f7f114 Jul 10 00:46:30.355563 unknown[653]: fetched base config from "system" Jul 10 00:46:30.355945 unknown[653]: fetched user config from "qemu" Jul 10 00:46:30.357028 ignition[653]: fetch-offline: fetch-offline passed Jul 10 00:46:30.357086 ignition[653]: Ignition finished successfully Jul 10 00:46:30.359884 systemd[1]: Finished ignition-fetch-offline.service. Jul 10 00:46:30.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.366219 systemd-networkd[725]: lo: Link UP Jul 10 00:46:30.366229 systemd-networkd[725]: lo: Gained carrier Jul 10 00:46:30.367000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.366686 systemd-networkd[725]: Enumeration completed Jul 10 00:46:30.366768 systemd[1]: Started systemd-networkd.service. Jul 10 00:46:30.366889 systemd-networkd[725]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:46:30.368315 systemd[1]: Reached target network.target. Jul 10 00:46:30.369003 systemd-networkd[725]: eth0: Link UP Jul 10 00:46:30.369007 systemd-networkd[725]: eth0: Gained carrier Jul 10 00:46:30.369827 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 10 00:46:30.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.370602 systemd[1]: Starting ignition-kargs.service... Jul 10 00:46:30.371976 systemd[1]: Starting iscsiuio.service... Jul 10 00:46:30.376317 systemd[1]: Started iscsiuio.service. Jul 10 00:46:30.380985 ignition[728]: Ignition 2.14.0 Jul 10 00:46:30.378206 systemd[1]: Starting iscsid.service... Jul 10 00:46:30.380991 ignition[728]: Stage: kargs Jul 10 00:46:30.381074 ignition[728]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:30.381082 ignition[728]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:30.381895 ignition[728]: kargs: kargs passed Jul 10 00:46:30.381928 ignition[728]: Ignition finished successfully Jul 10 00:46:30.387709 systemd[1]: Finished ignition-kargs.service. Jul 10 00:46:30.387000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.388939 systemd[1]: Starting ignition-disks.service... Jul 10 00:46:30.391562 iscsid[737]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:46:30.391562 iscsid[737]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 10 00:46:30.391562 iscsid[737]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 10 00:46:30.391562 iscsid[737]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 10 00:46:30.391562 iscsid[737]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:46:30.391562 iscsid[737]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 10 00:46:30.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.397629 systemd[1]: Finished ignition-disks.service. Jul 10 00:46:30.395834 ignition[739]: Ignition 2.14.0 Jul 10 00:46:30.398755 systemd[1]: Reached target initrd-root-device.target. Jul 10 00:46:30.395840 ignition[739]: Stage: disks Jul 10 00:46:30.400109 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:46:30.395926 ignition[739]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:30.401955 systemd[1]: Reached target local-fs.target. Jul 10 00:46:30.395935 ignition[739]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:30.403907 systemd[1]: Reached target sysinit.target. Jul 10 00:46:30.396840 ignition[739]: disks: disks passed Jul 10 00:46:30.405783 systemd[1]: Reached target basic.target. Jul 10 00:46:30.396874 ignition[739]: Ignition finished successfully Jul 10 00:46:30.415307 systemd[1]: Started iscsid.service. Jul 10 00:46:30.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.416890 systemd-networkd[725]: eth0: DHCPv4 address 10.0.0.138/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:46:30.417603 systemd[1]: Starting dracut-initqueue.service... Jul 10 00:46:30.426908 systemd[1]: Finished dracut-initqueue.service. Jul 10 00:46:30.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.427297 systemd[1]: Reached target remote-fs-pre.target. Jul 10 00:46:30.428682 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:46:30.430184 systemd[1]: Reached target remote-fs.target. Jul 10 00:46:30.432664 systemd[1]: Starting dracut-pre-mount.service... Jul 10 00:46:30.439506 systemd[1]: Finished dracut-pre-mount.service. Jul 10 00:46:30.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.440399 systemd[1]: Starting systemd-fsck-root.service... Jul 10 00:46:30.450763 systemd-fsck[760]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 10 00:46:30.455690 systemd[1]: Finished systemd-fsck-root.service. Jul 10 00:46:30.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.456945 systemd[1]: Mounting sysroot.mount... Jul 10 00:46:30.463400 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 10 00:46:30.463453 systemd[1]: Mounted sysroot.mount. Jul 10 00:46:30.463747 systemd[1]: Reached target initrd-root-fs.target. Jul 10 00:46:30.465960 systemd[1]: Mounting sysroot-usr.mount... Jul 10 00:46:30.466925 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 10 00:46:30.466953 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 10 00:46:30.466973 systemd[1]: Reached target ignition-diskful.target. Jul 10 00:46:30.468831 systemd[1]: Mounted sysroot-usr.mount. Jul 10 00:46:30.470608 systemd[1]: Starting initrd-setup-root.service... Jul 10 00:46:30.477748 initrd-setup-root[770]: cut: /sysroot/etc/passwd: No such file or directory Jul 10 00:46:30.481917 initrd-setup-root[778]: cut: /sysroot/etc/group: No such file or directory Jul 10 00:46:30.485828 initrd-setup-root[786]: cut: /sysroot/etc/shadow: No such file or directory Jul 10 00:46:30.489637 initrd-setup-root[794]: cut: /sysroot/etc/gshadow: No such file or directory Jul 10 00:46:30.514213 systemd[1]: Finished initrd-setup-root.service. Jul 10 00:46:30.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.516049 systemd[1]: Starting ignition-mount.service... Jul 10 00:46:30.517335 systemd[1]: Starting sysroot-boot.service... Jul 10 00:46:30.522847 bash[812]: umount: /sysroot/usr/share/oem: not mounted. Jul 10 00:46:30.531645 ignition[813]: INFO : Ignition 2.14.0 Jul 10 00:46:30.531645 ignition[813]: INFO : Stage: mount Jul 10 00:46:30.534174 ignition[813]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:30.534174 ignition[813]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:30.534174 ignition[813]: INFO : mount: mount passed Jul 10 00:46:30.534174 ignition[813]: INFO : Ignition finished successfully Jul 10 00:46:30.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:30.532838 systemd[1]: Finished sysroot-boot.service. Jul 10 00:46:30.534341 systemd[1]: Finished ignition-mount.service. Jul 10 00:46:31.180619 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 00:46:31.188966 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (822) Jul 10 00:46:31.188994 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 00:46:31.189004 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:46:31.190457 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:46:31.193824 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 00:46:31.196172 systemd[1]: Starting ignition-files.service... Jul 10 00:46:31.208876 ignition[842]: INFO : Ignition 2.14.0 Jul 10 00:46:31.208876 ignition[842]: INFO : Stage: files Jul 10 00:46:31.210497 ignition[842]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:31.210497 ignition[842]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:31.210497 ignition[842]: DEBUG : files: compiled without relabeling support, skipping Jul 10 00:46:31.214202 ignition[842]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 10 00:46:31.214202 ignition[842]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 10 00:46:31.214202 ignition[842]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 10 00:46:31.214202 ignition[842]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 10 00:46:31.214202 ignition[842]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 10 00:46:31.214202 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 10 00:46:31.214202 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Jul 10 00:46:31.213580 unknown[842]: wrote ssh authorized keys file for user: core Jul 10 00:46:31.252782 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 10 00:46:31.362068 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 10 00:46:31.362068 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 00:46:31.365818 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Jul 10 00:46:31.717692 systemd-networkd[725]: eth0: Gained IPv6LL Jul 10 00:46:32.068347 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 10 00:46:32.431231 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 00:46:32.431231 ignition[842]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 10 00:46:32.435235 ignition[842]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:46:32.460535 ignition[842]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:46:32.462936 ignition[842]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 10 00:46:32.462936 ignition[842]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:46:32.462936 ignition[842]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:46:32.462936 ignition[842]: INFO : files: files passed Jul 10 00:46:32.462936 ignition[842]: INFO : Ignition finished successfully Jul 10 00:46:32.485778 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 10 00:46:32.485804 kernel: audit: type=1130 audit(1752108392.462:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.485816 kernel: audit: type=1130 audit(1752108392.473:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.485827 kernel: audit: type=1130 audit(1752108392.478:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.485837 kernel: audit: type=1131 audit(1752108392.478:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.478000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.461963 systemd[1]: Finished ignition-files.service. Jul 10 00:46:32.463824 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 10 00:46:32.468925 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 10 00:46:32.490535 initrd-setup-root-after-ignition[865]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 10 00:46:32.469590 systemd[1]: Starting ignition-quench.service... Jul 10 00:46:32.492895 initrd-setup-root-after-ignition[867]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 10 00:46:32.471471 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 10 00:46:32.474104 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 10 00:46:32.474178 systemd[1]: Finished ignition-quench.service. Jul 10 00:46:32.478637 systemd[1]: Reached target ignition-complete.target. Jul 10 00:46:32.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.486342 systemd[1]: Starting initrd-parse-etc.service... Jul 10 00:46:32.506865 kernel: audit: type=1130 audit(1752108392.498:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.506886 kernel: audit: type=1131 audit(1752108392.498:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.498000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.497901 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 10 00:46:32.497973 systemd[1]: Finished initrd-parse-etc.service. Jul 10 00:46:32.499000 systemd[1]: Reached target initrd-fs.target. Jul 10 00:46:32.505362 systemd[1]: Reached target initrd.target. Jul 10 00:46:32.506863 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 10 00:46:32.507515 systemd[1]: Starting dracut-pre-pivot.service... Jul 10 00:46:32.517626 systemd[1]: Finished dracut-pre-pivot.service. Jul 10 00:46:32.522541 kernel: audit: type=1130 audit(1752108392.518:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.519078 systemd[1]: Starting initrd-cleanup.service... Jul 10 00:46:32.526887 systemd[1]: Stopped target nss-lookup.target. Jul 10 00:46:32.527783 systemd[1]: Stopped target remote-cryptsetup.target. Jul 10 00:46:32.529331 systemd[1]: Stopped target timers.target. Jul 10 00:46:32.530882 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 10 00:46:32.536629 kernel: audit: type=1131 audit(1752108392.531:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.530977 systemd[1]: Stopped dracut-pre-pivot.service. Jul 10 00:46:32.532461 systemd[1]: Stopped target initrd.target. Jul 10 00:46:32.536701 systemd[1]: Stopped target basic.target. Jul 10 00:46:32.538203 systemd[1]: Stopped target ignition-complete.target. Jul 10 00:46:32.539748 systemd[1]: Stopped target ignition-diskful.target. Jul 10 00:46:32.541284 systemd[1]: Stopped target initrd-root-device.target. Jul 10 00:46:32.542950 systemd[1]: Stopped target remote-fs.target. Jul 10 00:46:32.544535 systemd[1]: Stopped target remote-fs-pre.target. Jul 10 00:46:32.551821 systemd[1]: Stopped target sysinit.target. Jul 10 00:46:32.553302 systemd[1]: Stopped target local-fs.target. Jul 10 00:46:32.554829 systemd[1]: Stopped target local-fs-pre.target. Jul 10 00:46:32.556343 systemd[1]: Stopped target swap.target. Jul 10 00:46:32.569613 kernel: audit: type=1131 audit(1752108392.558:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.557761 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 10 00:46:32.557881 systemd[1]: Stopped dracut-pre-mount.service. Jul 10 00:46:32.575895 kernel: audit: type=1131 audit(1752108392.571:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.559361 systemd[1]: Stopped target cryptsetup.target. Jul 10 00:46:32.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.569663 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 10 00:46:32.569750 systemd[1]: Stopped dracut-initqueue.service. Jul 10 00:46:32.571503 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 10 00:46:32.571592 systemd[1]: Stopped ignition-fetch-offline.service. Jul 10 00:46:32.576031 systemd[1]: Stopped target paths.target. Jul 10 00:46:32.577527 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 10 00:46:32.581445 systemd[1]: Stopped systemd-ask-password-console.path. Jul 10 00:46:32.582794 systemd[1]: Stopped target slices.target. Jul 10 00:46:32.584560 systemd[1]: Stopped target sockets.target. Jul 10 00:46:32.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.586145 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 10 00:46:32.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.586248 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 10 00:46:32.592139 iscsid[737]: iscsid shutting down. Jul 10 00:46:32.587864 systemd[1]: ignition-files.service: Deactivated successfully. Jul 10 00:46:32.587949 systemd[1]: Stopped ignition-files.service. Jul 10 00:46:32.590082 systemd[1]: Stopping ignition-mount.service... Jul 10 00:46:32.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.592945 systemd[1]: Stopping iscsid.service... Jul 10 00:46:32.594509 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 10 00:46:32.600172 ignition[882]: INFO : Ignition 2.14.0 Jul 10 00:46:32.600172 ignition[882]: INFO : Stage: umount Jul 10 00:46:32.600172 ignition[882]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:46:32.600172 ignition[882]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:46:32.600172 ignition[882]: INFO : umount: umount passed Jul 10 00:46:32.600172 ignition[882]: INFO : Ignition finished successfully Jul 10 00:46:32.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.605000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.606000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.594627 systemd[1]: Stopped kmod-static-nodes.service. Jul 10 00:46:32.609000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.596989 systemd[1]: Stopping sysroot-boot.service... Jul 10 00:46:32.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.598405 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 10 00:46:32.598532 systemd[1]: Stopped systemd-udev-trigger.service. Jul 10 00:46:32.600277 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 10 00:46:32.600365 systemd[1]: Stopped dracut-pre-trigger.service. Jul 10 00:46:32.603176 systemd[1]: iscsid.service: Deactivated successfully. Jul 10 00:46:32.603261 systemd[1]: Stopped iscsid.service. Jul 10 00:46:32.605933 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 10 00:46:32.606002 systemd[1]: Stopped ignition-mount.service. Jul 10 00:46:32.607585 systemd[1]: iscsid.socket: Deactivated successfully. Jul 10 00:46:32.607652 systemd[1]: Closed iscsid.socket. Jul 10 00:46:32.626000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.608959 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 10 00:46:32.608993 systemd[1]: Stopped ignition-disks.service. Jul 10 00:46:32.609814 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 10 00:46:32.609847 systemd[1]: Stopped ignition-kargs.service. Jul 10 00:46:32.633000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.610262 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 10 00:46:32.634000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.610293 systemd[1]: Stopped ignition-setup.service. Jul 10 00:46:32.610649 systemd[1]: Stopping iscsiuio.service... Jul 10 00:46:32.611571 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 10 00:46:32.611956 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 10 00:46:32.612021 systemd[1]: Finished initrd-cleanup.service. Jul 10 00:46:32.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.613773 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 10 00:46:32.613845 systemd[1]: Stopped iscsiuio.service. Jul 10 00:46:32.615994 systemd[1]: Stopped target network.target. Jul 10 00:46:32.617198 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 10 00:46:32.646000 audit: BPF prog-id=6 op=UNLOAD Jul 10 00:46:32.617228 systemd[1]: Closed iscsiuio.socket. Jul 10 00:46:32.618737 systemd[1]: Stopping systemd-networkd.service... Jul 10 00:46:32.620499 systemd[1]: Stopping systemd-resolved.service... Jul 10 00:46:32.649000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.624414 systemd-networkd[725]: eth0: DHCPv6 lease lost Jul 10 00:46:32.650000 audit: BPF prog-id=9 op=UNLOAD Jul 10 00:46:32.625556 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 10 00:46:32.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.625633 systemd[1]: Stopped systemd-networkd.service. Jul 10 00:46:32.628110 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 10 00:46:32.628138 systemd[1]: Closed systemd-networkd.socket. Jul 10 00:46:32.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.658000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.630747 systemd[1]: Stopping network-cleanup.service... Jul 10 00:46:32.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.632448 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 10 00:46:32.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.632492 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 10 00:46:32.634150 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 10 00:46:32.634191 systemd[1]: Stopped systemd-sysctl.service. Jul 10 00:46:32.665000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.636064 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 10 00:46:32.636096 systemd[1]: Stopped systemd-modules-load.service. Jul 10 00:46:32.637046 systemd[1]: Stopping systemd-udevd.service... Jul 10 00:46:32.641166 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 10 00:46:32.641652 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 10 00:46:32.641740 systemd[1]: Stopped systemd-resolved.service. Jul 10 00:46:32.648099 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 10 00:46:32.648217 systemd[1]: Stopped systemd-udevd.service. Jul 10 00:46:32.650683 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 10 00:46:32.650758 systemd[1]: Stopped network-cleanup.service. Jul 10 00:46:32.652303 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 10 00:46:32.652334 systemd[1]: Closed systemd-udevd-control.socket. Jul 10 00:46:32.654003 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 10 00:46:32.654030 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 10 00:46:32.655675 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 10 00:46:32.655712 systemd[1]: Stopped dracut-pre-udev.service. Jul 10 00:46:32.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.657452 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 10 00:46:32.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:32.657484 systemd[1]: Stopped dracut-cmdline.service. Jul 10 00:46:32.658948 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 10 00:46:32.658980 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 10 00:46:32.660042 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 10 00:46:32.661323 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 10 00:46:32.661364 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 10 00:46:32.665017 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 10 00:46:32.665098 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 10 00:46:32.680829 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 10 00:46:32.680923 systemd[1]: Stopped sysroot-boot.service. Jul 10 00:46:32.681937 systemd[1]: Reached target initrd-switch-root.target. Jul 10 00:46:32.683424 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 10 00:46:32.683477 systemd[1]: Stopped initrd-setup-root.service. Jul 10 00:46:32.684996 systemd[1]: Starting initrd-switch-root.service... Jul 10 00:46:32.700550 systemd[1]: Switching root. Jul 10 00:46:32.719127 systemd-journald[197]: Journal stopped Jul 10 00:46:35.240971 systemd-journald[197]: Received SIGTERM from PID 1 (n/a). Jul 10 00:46:35.241022 kernel: SELinux: Class mctp_socket not defined in policy. Jul 10 00:46:35.241035 kernel: SELinux: Class anon_inode not defined in policy. Jul 10 00:46:35.241047 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 10 00:46:35.241057 kernel: SELinux: policy capability network_peer_controls=1 Jul 10 00:46:35.241067 kernel: SELinux: policy capability open_perms=1 Jul 10 00:46:35.241077 kernel: SELinux: policy capability extended_socket_class=1 Jul 10 00:46:35.241089 kernel: SELinux: policy capability always_check_network=0 Jul 10 00:46:35.241099 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 10 00:46:35.241111 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 10 00:46:35.241123 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 10 00:46:35.241139 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 10 00:46:35.241153 systemd[1]: Successfully loaded SELinux policy in 38.046ms. Jul 10 00:46:35.241169 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.661ms. Jul 10 00:46:35.241180 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:46:35.241191 systemd[1]: Detected virtualization kvm. Jul 10 00:46:35.241202 systemd[1]: Detected architecture x86-64. Jul 10 00:46:35.241212 systemd[1]: Detected first boot. Jul 10 00:46:35.241223 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:46:35.241235 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 10 00:46:35.241246 systemd[1]: Populated /etc with preset unit settings. Jul 10 00:46:35.241257 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:46:35.241270 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:46:35.241283 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:46:35.241295 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 10 00:46:35.241306 systemd[1]: Stopped initrd-switch-root.service. Jul 10 00:46:35.241317 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 10 00:46:35.241328 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 10 00:46:35.241338 systemd[1]: Created slice system-addon\x2drun.slice. Jul 10 00:46:35.241348 systemd[1]: Created slice system-getty.slice. Jul 10 00:46:35.241359 systemd[1]: Created slice system-modprobe.slice. Jul 10 00:46:35.241391 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 10 00:46:35.241404 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 10 00:46:35.241414 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 10 00:46:35.241425 systemd[1]: Created slice user.slice. Jul 10 00:46:35.241436 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:46:35.241447 systemd[1]: Started systemd-ask-password-wall.path. Jul 10 00:46:35.241457 systemd[1]: Set up automount boot.automount. Jul 10 00:46:35.241468 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 10 00:46:35.241478 systemd[1]: Stopped target initrd-switch-root.target. Jul 10 00:46:35.241489 systemd[1]: Stopped target initrd-fs.target. Jul 10 00:46:35.241501 systemd[1]: Stopped target initrd-root-fs.target. Jul 10 00:46:35.241512 systemd[1]: Reached target integritysetup.target. Jul 10 00:46:35.241522 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:46:35.241533 systemd[1]: Reached target remote-fs.target. Jul 10 00:46:35.241544 systemd[1]: Reached target slices.target. Jul 10 00:46:35.241554 systemd[1]: Reached target swap.target. Jul 10 00:46:35.241565 systemd[1]: Reached target torcx.target. Jul 10 00:46:35.241575 systemd[1]: Reached target veritysetup.target. Jul 10 00:46:35.241587 systemd[1]: Listening on systemd-coredump.socket. Jul 10 00:46:35.241597 systemd[1]: Listening on systemd-initctl.socket. Jul 10 00:46:35.241607 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:46:35.241619 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:46:35.241630 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:46:35.241640 systemd[1]: Listening on systemd-userdbd.socket. Jul 10 00:46:35.241651 systemd[1]: Mounting dev-hugepages.mount... Jul 10 00:46:35.241661 systemd[1]: Mounting dev-mqueue.mount... Jul 10 00:46:35.241671 systemd[1]: Mounting media.mount... Jul 10 00:46:35.241682 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:35.241694 systemd[1]: Mounting sys-kernel-debug.mount... Jul 10 00:46:35.241704 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 10 00:46:35.241715 systemd[1]: Mounting tmp.mount... Jul 10 00:46:35.241725 systemd[1]: Starting flatcar-tmpfiles.service... Jul 10 00:46:35.241736 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:46:35.241746 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:46:35.241757 systemd[1]: Starting modprobe@configfs.service... Jul 10 00:46:35.241768 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:46:35.241778 systemd[1]: Starting modprobe@drm.service... Jul 10 00:46:35.241790 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:46:35.241800 systemd[1]: Starting modprobe@fuse.service... Jul 10 00:46:35.241811 systemd[1]: Starting modprobe@loop.service... Jul 10 00:46:35.241822 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 10 00:46:35.241832 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 10 00:46:35.241844 systemd[1]: Stopped systemd-fsck-root.service. Jul 10 00:46:35.241857 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 10 00:46:35.241867 systemd[1]: Stopped systemd-fsck-usr.service. Jul 10 00:46:35.241877 kernel: loop: module loaded Jul 10 00:46:35.241888 systemd[1]: Stopped systemd-journald.service. Jul 10 00:46:35.241899 kernel: fuse: init (API version 7.34) Jul 10 00:46:35.241910 systemd[1]: Starting systemd-journald.service... Jul 10 00:46:35.241921 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:46:35.241931 systemd[1]: Starting systemd-network-generator.service... Jul 10 00:46:35.241942 systemd[1]: Starting systemd-remount-fs.service... Jul 10 00:46:35.241952 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:46:35.241963 systemd[1]: verity-setup.service: Deactivated successfully. Jul 10 00:46:35.241974 systemd[1]: Stopped verity-setup.service. Jul 10 00:46:35.241986 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:35.242001 systemd[1]: Mounted dev-hugepages.mount. Jul 10 00:46:35.242016 systemd-journald[995]: Journal started Jul 10 00:46:35.242058 systemd-journald[995]: Runtime Journal (/run/log/journal/ebee89e8de84472fab742c426c4c36a3) is 6.0M, max 48.4M, 42.4M free. Jul 10 00:46:35.242090 systemd[1]: Mounted dev-mqueue.mount. Jul 10 00:46:32.777000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 10 00:46:33.028000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:46:33.028000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:46:33.029000 audit: BPF prog-id=10 op=LOAD Jul 10 00:46:33.029000 audit: BPF prog-id=10 op=UNLOAD Jul 10 00:46:33.029000 audit: BPF prog-id=11 op=LOAD Jul 10 00:46:33.029000 audit: BPF prog-id=11 op=UNLOAD Jul 10 00:46:33.061000 audit[915]: AVC avc: denied { associate } for pid=915 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 00:46:33.061000 audit[915]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001858cc a1=c00002ae40 a2=c000029100 a3=32 items=0 ppid=898 pid=915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:33.061000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:46:33.062000 audit[915]: AVC avc: denied { associate } for pid=915 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 00:46:33.062000 audit[915]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001859a5 a2=1ed a3=0 items=2 ppid=898 pid=915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:33.062000 audit: CWD cwd="/" Jul 10 00:46:33.062000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:33.062000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:33.062000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:46:35.112000 audit: BPF prog-id=12 op=LOAD Jul 10 00:46:35.112000 audit: BPF prog-id=3 op=UNLOAD Jul 10 00:46:35.112000 audit: BPF prog-id=13 op=LOAD Jul 10 00:46:35.112000 audit: BPF prog-id=14 op=LOAD Jul 10 00:46:35.112000 audit: BPF prog-id=4 op=UNLOAD Jul 10 00:46:35.112000 audit: BPF prog-id=5 op=UNLOAD Jul 10 00:46:35.113000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.116000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.122000 audit: BPF prog-id=12 op=UNLOAD Jul 10 00:46:35.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.214000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.216000 audit: BPF prog-id=15 op=LOAD Jul 10 00:46:35.216000 audit: BPF prog-id=16 op=LOAD Jul 10 00:46:35.217000 audit: BPF prog-id=17 op=LOAD Jul 10 00:46:35.217000 audit: BPF prog-id=13 op=UNLOAD Jul 10 00:46:35.217000 audit: BPF prog-id=14 op=UNLOAD Jul 10 00:46:35.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.239000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 10 00:46:35.239000 audit[995]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffd71a22290 a2=4000 a3=7ffd71a2232c items=0 ppid=1 pid=995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:35.239000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 10 00:46:35.110940 systemd[1]: Queued start job for default target multi-user.target. Jul 10 00:46:33.060200 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:46:35.110950 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 10 00:46:33.060454 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:46:35.113801 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 10 00:46:33.060471 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:46:33.060502 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 10 00:46:33.060512 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 10 00:46:33.060544 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 10 00:46:33.060555 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 10 00:46:33.060750 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 10 00:46:33.060787 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:46:33.060799 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:46:33.061431 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 10 00:46:33.061477 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 10 00:46:33.061500 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 10 00:46:33.061515 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 10 00:46:33.061536 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 10 00:46:35.244474 systemd[1]: Started systemd-journald.service. Jul 10 00:46:33.061549 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:33Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 10 00:46:34.840905 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:34Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:46:34.841152 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:34Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:46:34.841253 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:34Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:46:34.841681 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:34Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:46:34.841745 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:34Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 10 00:46:34.841805 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-10T00:46:34Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 10 00:46:35.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.245587 systemd[1]: Mounted media.mount. Jul 10 00:46:35.246389 systemd[1]: Mounted sys-kernel-debug.mount. Jul 10 00:46:35.247399 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 10 00:46:35.248258 systemd[1]: Mounted tmp.mount. Jul 10 00:46:35.249151 systemd[1]: Finished flatcar-tmpfiles.service. Jul 10 00:46:35.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.250213 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:46:35.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.251266 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 10 00:46:35.251424 systemd[1]: Finished modprobe@configfs.service. Jul 10 00:46:35.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.252539 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:46:35.252656 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:46:35.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.253665 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:46:35.253796 systemd[1]: Finished modprobe@drm.service. Jul 10 00:46:35.254000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.254813 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:46:35.254930 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:46:35.255000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.255000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.256034 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 10 00:46:35.256152 systemd[1]: Finished modprobe@fuse.service. Jul 10 00:46:35.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.256000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.257147 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:46:35.257258 systemd[1]: Finished modprobe@loop.service. Jul 10 00:46:35.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.257000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.258274 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:46:35.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.259450 systemd[1]: Finished systemd-network-generator.service. Jul 10 00:46:35.260000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.260691 systemd[1]: Finished systemd-remount-fs.service. Jul 10 00:46:35.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.261952 systemd[1]: Reached target network-pre.target. Jul 10 00:46:35.263898 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 10 00:46:35.265823 systemd[1]: Mounting sys-kernel-config.mount... Jul 10 00:46:35.266716 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 10 00:46:35.268240 systemd[1]: Starting systemd-hwdb-update.service... Jul 10 00:46:35.270188 systemd[1]: Starting systemd-journal-flush.service... Jul 10 00:46:35.271204 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:46:35.272253 systemd[1]: Starting systemd-random-seed.service... Jul 10 00:46:35.273452 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:46:35.274541 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:46:35.276901 systemd[1]: Starting systemd-sysusers.service... Jul 10 00:46:35.281528 systemd-journald[995]: Time spent on flushing to /var/log/journal/ebee89e8de84472fab742c426c4c36a3 is 15.051ms for 1154 entries. Jul 10 00:46:35.281528 systemd-journald[995]: System Journal (/var/log/journal/ebee89e8de84472fab742c426c4c36a3) is 8.0M, max 195.6M, 187.6M free. Jul 10 00:46:35.306031 systemd-journald[995]: Received client request to flush runtime journal. Jul 10 00:46:35.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.282025 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 10 00:46:35.284903 systemd[1]: Mounted sys-kernel-config.mount. Jul 10 00:46:35.307006 udevadm[1019]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 10 00:46:35.286202 systemd[1]: Finished systemd-random-seed.service. Jul 10 00:46:35.287720 systemd[1]: Reached target first-boot-complete.target. Jul 10 00:46:35.291193 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:46:35.293328 systemd[1]: Starting systemd-udev-settle.service... Jul 10 00:46:35.294586 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:46:35.304823 systemd[1]: Finished systemd-sysusers.service. Jul 10 00:46:35.306732 systemd[1]: Finished systemd-journal-flush.service. Jul 10 00:46:35.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.723060 systemd[1]: Finished systemd-hwdb-update.service. Jul 10 00:46:35.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.724000 audit: BPF prog-id=18 op=LOAD Jul 10 00:46:35.724000 audit: BPF prog-id=19 op=LOAD Jul 10 00:46:35.724000 audit: BPF prog-id=7 op=UNLOAD Jul 10 00:46:35.724000 audit: BPF prog-id=8 op=UNLOAD Jul 10 00:46:35.725534 systemd[1]: Starting systemd-udevd.service... Jul 10 00:46:35.742163 systemd-udevd[1021]: Using default interface naming scheme 'v252'. Jul 10 00:46:35.756207 systemd[1]: Started systemd-udevd.service. Jul 10 00:46:35.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.757000 audit: BPF prog-id=20 op=LOAD Jul 10 00:46:35.759643 systemd[1]: Starting systemd-networkd.service... Jul 10 00:46:35.763000 audit: BPF prog-id=21 op=LOAD Jul 10 00:46:35.763000 audit: BPF prog-id=22 op=LOAD Jul 10 00:46:35.764000 audit: BPF prog-id=23 op=LOAD Jul 10 00:46:35.765214 systemd[1]: Starting systemd-userdbd.service... Jul 10 00:46:35.794159 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 10 00:46:35.794469 systemd[1]: Started systemd-userdbd.service. Jul 10 00:46:35.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.807943 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:46:35.826425 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 10 00:46:35.834453 kernel: ACPI: button: Power Button [PWRF] Jul 10 00:46:35.834977 systemd-networkd[1029]: lo: Link UP Jul 10 00:46:35.835233 systemd-networkd[1029]: lo: Gained carrier Jul 10 00:46:35.835722 systemd-networkd[1029]: Enumeration completed Jul 10 00:46:35.835935 systemd[1]: Started systemd-networkd.service. Jul 10 00:46:35.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:35.836932 systemd-networkd[1029]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:46:35.841372 systemd-networkd[1029]: eth0: Link UP Jul 10 00:46:35.841531 systemd-networkd[1029]: eth0: Gained carrier Jul 10 00:46:35.849000 audit[1031]: AVC avc: denied { confidentiality } for pid=1031 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 10 00:46:35.860557 systemd-networkd[1029]: eth0: DHCPv4 address 10.0.0.138/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:46:35.849000 audit[1031]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55a144774b60 a1=338ac a2=7f7981ac1bc5 a3=5 items=110 ppid=1021 pid=1031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:35.849000 audit: CWD cwd="/" Jul 10 00:46:35.849000 audit: PATH item=0 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=1 name=(null) inode=1018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=2 name=(null) inode=1018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=3 name=(null) inode=1019 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=4 name=(null) inode=1018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=5 name=(null) inode=1020 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=6 name=(null) inode=1018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=7 name=(null) inode=1021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=8 name=(null) inode=1021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=9 name=(null) inode=1022 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=10 name=(null) inode=1021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=11 name=(null) inode=1023 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=12 name=(null) inode=1021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=13 name=(null) inode=1024 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=14 name=(null) inode=1021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=15 name=(null) inode=16385 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=16 name=(null) inode=1021 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=17 name=(null) inode=16386 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=18 name=(null) inode=1018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=19 name=(null) inode=16387 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=20 name=(null) inode=16387 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=21 name=(null) inode=16388 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=22 name=(null) inode=16387 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=23 name=(null) inode=16389 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=24 name=(null) inode=16387 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=25 name=(null) inode=16390 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=26 name=(null) inode=16387 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=27 name=(null) inode=16391 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=28 name=(null) inode=16387 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=29 name=(null) inode=16392 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=30 name=(null) inode=1018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=31 name=(null) inode=16393 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=32 name=(null) inode=16393 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=33 name=(null) inode=16394 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=34 name=(null) inode=16393 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=35 name=(null) inode=16395 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=36 name=(null) inode=16393 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=37 name=(null) inode=16396 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=38 name=(null) inode=16393 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=39 name=(null) inode=16397 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=40 name=(null) inode=16393 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=41 name=(null) inode=16398 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=42 name=(null) inode=1018 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=43 name=(null) inode=16399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=44 name=(null) inode=16399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=45 name=(null) inode=16400 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=46 name=(null) inode=16399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=47 name=(null) inode=16401 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=48 name=(null) inode=16399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=49 name=(null) inode=16402 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=50 name=(null) inode=16399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=51 name=(null) inode=16403 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=52 name=(null) inode=16399 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=53 name=(null) inode=16404 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=54 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=55 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=56 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=57 name=(null) inode=16406 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=58 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=59 name=(null) inode=16407 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=60 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=61 name=(null) inode=16408 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=62 name=(null) inode=16408 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=63 name=(null) inode=16409 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=64 name=(null) inode=16408 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=65 name=(null) inode=16410 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=66 name=(null) inode=16408 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=67 name=(null) inode=16411 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=68 name=(null) inode=16408 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=69 name=(null) inode=16412 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=70 name=(null) inode=16408 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=71 name=(null) inode=16413 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=72 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=73 name=(null) inode=16414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=74 name=(null) inode=16414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=75 name=(null) inode=16415 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=76 name=(null) inode=16414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=77 name=(null) inode=16416 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=78 name=(null) inode=16414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=79 name=(null) inode=16417 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=80 name=(null) inode=16414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=81 name=(null) inode=16418 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=82 name=(null) inode=16414 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=83 name=(null) inode=16419 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=84 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=85 name=(null) inode=16420 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=86 name=(null) inode=16420 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=87 name=(null) inode=16421 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=88 name=(null) inode=16420 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=89 name=(null) inode=16422 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=90 name=(null) inode=16420 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=91 name=(null) inode=16423 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=92 name=(null) inode=16420 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=93 name=(null) inode=16424 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=94 name=(null) inode=16420 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=95 name=(null) inode=16425 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=96 name=(null) inode=16405 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=97 name=(null) inode=16426 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=98 name=(null) inode=16426 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=99 name=(null) inode=16427 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=100 name=(null) inode=16426 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=101 name=(null) inode=16428 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=102 name=(null) inode=16426 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=103 name=(null) inode=16429 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=104 name=(null) inode=16426 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=105 name=(null) inode=16430 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=106 name=(null) inode=16426 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=107 name=(null) inode=16431 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PATH item=109 name=(null) inode=15460 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:46:35.849000 audit: PROCTITLE proctitle="(udev-worker)" Jul 10 00:46:35.890986 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 10 00:46:35.898007 kernel: i801_smbus 0000:00:1f.3: Enabling SMBus device Jul 10 00:46:35.898567 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 10 00:46:35.898679 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 10 00:46:35.900607 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 10 00:46:35.903409 kernel: mousedev: PS/2 mouse device common for all mice Jul 10 00:46:35.955819 kernel: kvm: Nested Virtualization enabled Jul 10 00:46:35.955913 kernel: SVM: kvm: Nested Paging enabled Jul 10 00:46:35.955928 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 10 00:46:35.956493 kernel: SVM: Virtual GIF supported Jul 10 00:46:36.006399 kernel: EDAC MC: Ver: 3.0.0 Jul 10 00:46:36.030725 systemd[1]: Finished systemd-udev-settle.service. Jul 10 00:46:36.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.032873 systemd[1]: Starting lvm2-activation-early.service... Jul 10 00:46:36.039926 lvm[1058]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:46:36.064965 systemd[1]: Finished lvm2-activation-early.service. Jul 10 00:46:36.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.065954 systemd[1]: Reached target cryptsetup.target. Jul 10 00:46:36.067677 systemd[1]: Starting lvm2-activation.service... Jul 10 00:46:36.070818 lvm[1059]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:46:36.095957 systemd[1]: Finished lvm2-activation.service. Jul 10 00:46:36.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.096907 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:46:36.097801 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 10 00:46:36.097825 systemd[1]: Reached target local-fs.target. Jul 10 00:46:36.098644 systemd[1]: Reached target machines.target. Jul 10 00:46:36.100332 systemd[1]: Starting ldconfig.service... Jul 10 00:46:36.101277 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.101319 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:36.102201 systemd[1]: Starting systemd-boot-update.service... Jul 10 00:46:36.103964 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 10 00:46:36.106262 systemd[1]: Starting systemd-machine-id-commit.service... Jul 10 00:46:36.109000 systemd[1]: Starting systemd-sysext.service... Jul 10 00:46:36.116560 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1061 (bootctl) Jul 10 00:46:36.117969 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 10 00:46:36.124692 systemd[1]: Unmounting usr-share-oem.mount... Jul 10 00:46:36.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.126092 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 10 00:46:36.129647 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 10 00:46:36.129915 systemd[1]: Unmounted usr-share-oem.mount. Jul 10 00:46:36.139411 kernel: loop0: detected capacity change from 0 to 229808 Jul 10 00:46:36.434183 systemd-fsck[1069]: fsck.fat 4.2 (2021-01-31) Jul 10 00:46:36.434183 systemd-fsck[1069]: /dev/vda1: 791 files, 120751/258078 clusters Jul 10 00:46:36.437392 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 10 00:46:36.437533 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 10 00:46:36.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.441167 systemd[1]: Mounting boot.mount... Jul 10 00:46:36.449730 systemd[1]: Mounted boot.mount. Jul 10 00:46:36.470403 kernel: loop1: detected capacity change from 0 to 229808 Jul 10 00:46:36.486289 (sd-sysext)[1074]: Using extensions 'kubernetes'. Jul 10 00:46:36.486673 (sd-sysext)[1074]: Merged extensions into '/usr'. Jul 10 00:46:36.489101 systemd[1]: Finished systemd-boot-update.service. Jul 10 00:46:36.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.503835 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:36.505623 systemd[1]: Mounting usr-share-oem.mount... Jul 10 00:46:36.506720 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.508149 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:46:36.509989 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:46:36.511782 systemd[1]: Starting modprobe@loop.service... Jul 10 00:46:36.512603 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.512716 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:36.512831 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:36.515498 systemd[1]: Mounted usr-share-oem.mount. Jul 10 00:46:36.516573 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:46:36.516685 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:46:36.517000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.518066 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:46:36.518208 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:46:36.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.519638 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:46:36.519753 systemd[1]: Finished modprobe@loop.service. Jul 10 00:46:36.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.520000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.520985 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:46:36.521078 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.521985 systemd[1]: Finished systemd-sysext.service. Jul 10 00:46:36.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.524457 systemd[1]: Starting ensure-sysext.service... Jul 10 00:46:36.526765 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 10 00:46:36.532342 systemd[1]: Reloading. Jul 10 00:46:36.584167 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-07-10T00:46:36Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:46:36.584584 /usr/lib/systemd/system-generators/torcx-generator[1101]: time="2025-07-10T00:46:36Z" level=info msg="torcx already run" Jul 10 00:46:36.633929 systemd-tmpfiles[1081]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 00:46:36.636410 systemd-tmpfiles[1081]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 00:46:36.639897 systemd-tmpfiles[1081]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 00:46:36.676312 ldconfig[1060]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 10 00:46:36.683068 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:46:36.683085 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:46:36.700569 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:46:36.755000 audit: BPF prog-id=24 op=LOAD Jul 10 00:46:36.755000 audit: BPF prog-id=15 op=UNLOAD Jul 10 00:46:36.755000 audit: BPF prog-id=25 op=LOAD Jul 10 00:46:36.755000 audit: BPF prog-id=26 op=LOAD Jul 10 00:46:36.755000 audit: BPF prog-id=16 op=UNLOAD Jul 10 00:46:36.755000 audit: BPF prog-id=17 op=UNLOAD Jul 10 00:46:36.756000 audit: BPF prog-id=27 op=LOAD Jul 10 00:46:36.756000 audit: BPF prog-id=20 op=UNLOAD Jul 10 00:46:36.757000 audit: BPF prog-id=28 op=LOAD Jul 10 00:46:36.757000 audit: BPF prog-id=29 op=LOAD Jul 10 00:46:36.757000 audit: BPF prog-id=18 op=UNLOAD Jul 10 00:46:36.757000 audit: BPF prog-id=19 op=UNLOAD Jul 10 00:46:36.758000 audit: BPF prog-id=30 op=LOAD Jul 10 00:46:36.758000 audit: BPF prog-id=21 op=UNLOAD Jul 10 00:46:36.758000 audit: BPF prog-id=31 op=LOAD Jul 10 00:46:36.758000 audit: BPF prog-id=32 op=LOAD Jul 10 00:46:36.758000 audit: BPF prog-id=22 op=UNLOAD Jul 10 00:46:36.758000 audit: BPF prog-id=23 op=UNLOAD Jul 10 00:46:36.762665 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 10 00:46:36.763853 systemd[1]: Finished ldconfig.service. Jul 10 00:46:36.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.765080 systemd[1]: Finished systemd-machine-id-commit.service. Jul 10 00:46:36.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.766953 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 10 00:46:36.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.770437 systemd[1]: Starting audit-rules.service... Jul 10 00:46:36.772100 systemd[1]: Starting clean-ca-certificates.service... Jul 10 00:46:36.774088 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 10 00:46:36.777000 audit: BPF prog-id=33 op=LOAD Jul 10 00:46:36.778213 systemd[1]: Starting systemd-resolved.service... Jul 10 00:46:36.779000 audit: BPF prog-id=34 op=LOAD Jul 10 00:46:36.780439 systemd[1]: Starting systemd-timesyncd.service... Jul 10 00:46:36.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.782075 systemd[1]: Starting systemd-update-utmp.service... Jul 10 00:46:36.783313 systemd[1]: Finished clean-ca-certificates.service. Jul 10 00:46:36.785000 audit[1154]: SYSTEM_BOOT pid=1154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.788975 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:36.789198 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.790395 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:46:36.792259 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:46:36.801659 systemd[1]: Starting modprobe@loop.service... Jul 10 00:46:36.802444 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.802620 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:36.802771 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:46:36.802903 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:36.804600 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 10 00:46:36.805000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.806025 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:46:36.806136 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:46:36.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.807370 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:46:36.807495 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:46:36.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.808780 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:46:36.808872 systemd[1]: Finished modprobe@loop.service. Jul 10 00:46:36.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.810128 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:46:36.810236 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.811601 systemd[1]: Starting systemd-update-done.service... Jul 10 00:46:36.812952 systemd[1]: Finished systemd-update-utmp.service. Jul 10 00:46:36.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:36.817310 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:36.817509 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.817000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 10 00:46:36.817000 audit[1166]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe5b3cbb10 a2=420 a3=0 items=0 ppid=1143 pid=1166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:36.817000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 10 00:46:36.818106 augenrules[1166]: No rules Jul 10 00:46:36.818725 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:46:36.820454 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:46:36.822190 systemd[1]: Starting modprobe@loop.service... Jul 10 00:46:36.822980 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.823081 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:36.823162 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:46:36.823225 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:36.824098 systemd[1]: Finished audit-rules.service. Jul 10 00:46:36.825435 systemd[1]: Finished systemd-update-done.service. Jul 10 00:46:36.826606 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:46:36.826711 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:46:36.827872 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:46:36.827971 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:46:36.829149 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:46:36.829250 systemd[1]: Finished modprobe@loop.service. Jul 10 00:46:36.832331 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:36.832699 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.833704 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:46:36.835473 systemd[1]: Starting modprobe@drm.service... Jul 10 00:46:36.837423 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:46:36.839639 systemd[1]: Starting modprobe@loop.service... Jul 10 00:46:36.840513 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.840639 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:36.841953 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 10 00:46:36.843069 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:46:36.843162 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 00:46:36.844096 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:46:36.844199 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:46:36.845563 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:46:36.845659 systemd[1]: Finished modprobe@drm.service. Jul 10 00:46:36.846903 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:46:36.847001 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:46:36.848252 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:46:36.848362 systemd[1]: Finished modprobe@loop.service. Jul 10 00:46:36.850622 systemd[1]: Finished ensure-sysext.service. Jul 10 00:46:36.852311 systemd-resolved[1149]: Positive Trust Anchors: Jul 10 00:46:36.852333 systemd-resolved[1149]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:46:36.852361 systemd-resolved[1149]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:46:36.852423 systemd[1]: Started systemd-timesyncd.service. Jul 10 00:46:36.853037 systemd-timesyncd[1153]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 10 00:46:36.853087 systemd-timesyncd[1153]: Initial clock synchronization to Thu 2025-07-10 00:46:36.635999 UTC. Jul 10 00:46:36.853683 systemd[1]: Reached target time-set.target. Jul 10 00:46:36.854665 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:46:36.854698 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.859961 systemd-resolved[1149]: Defaulting to hostname 'linux'. Jul 10 00:46:36.861341 systemd[1]: Started systemd-resolved.service. Jul 10 00:46:36.862214 systemd[1]: Reached target network.target. Jul 10 00:46:36.863029 systemd[1]: Reached target nss-lookup.target. Jul 10 00:46:36.863866 systemd[1]: Reached target sysinit.target. Jul 10 00:46:36.864720 systemd[1]: Started motdgen.path. Jul 10 00:46:36.865459 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 10 00:46:36.866719 systemd[1]: Started logrotate.timer. Jul 10 00:46:36.867564 systemd[1]: Started mdadm.timer. Jul 10 00:46:36.868251 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 10 00:46:36.869157 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 10 00:46:36.869186 systemd[1]: Reached target paths.target. Jul 10 00:46:36.869992 systemd[1]: Reached target timers.target. Jul 10 00:46:36.871065 systemd[1]: Listening on dbus.socket. Jul 10 00:46:36.872707 systemd[1]: Starting docker.socket... Jul 10 00:46:36.875475 systemd[1]: Listening on sshd.socket. Jul 10 00:46:36.876323 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:36.876659 systemd[1]: Listening on docker.socket. Jul 10 00:46:36.877494 systemd[1]: Reached target sockets.target. Jul 10 00:46:36.878276 systemd[1]: Reached target basic.target. Jul 10 00:46:36.879100 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.879124 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:46:36.879996 systemd[1]: Starting containerd.service... Jul 10 00:46:36.881637 systemd[1]: Starting dbus.service... Jul 10 00:46:36.883210 systemd[1]: Starting enable-oem-cloudinit.service... Jul 10 00:46:36.885040 systemd[1]: Starting extend-filesystems.service... Jul 10 00:46:36.885985 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 10 00:46:36.886979 systemd[1]: Starting motdgen.service... Jul 10 00:46:36.888921 jq[1185]: false Jul 10 00:46:36.888736 systemd[1]: Starting prepare-helm.service... Jul 10 00:46:36.890454 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 10 00:46:36.892553 systemd[1]: Starting sshd-keygen.service... Jul 10 00:46:36.895670 systemd[1]: Starting systemd-logind.service... Jul 10 00:46:36.896542 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:46:36.896604 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 10 00:46:36.896951 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 10 00:46:36.898435 systemd[1]: Starting update-engine.service... Jul 10 00:46:36.900876 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 10 00:46:36.903651 jq[1203]: true Jul 10 00:46:36.903456 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 10 00:46:36.903629 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 10 00:46:36.904641 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 10 00:46:36.904797 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 10 00:46:36.907525 dbus-daemon[1184]: [system] SELinux support is enabled Jul 10 00:46:36.907769 systemd[1]: Started dbus.service. Jul 10 00:46:36.911305 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 10 00:46:36.911336 systemd[1]: Reached target system-config.target. Jul 10 00:46:36.912464 tar[1205]: linux-amd64/LICENSE Jul 10 00:46:36.912666 tar[1205]: linux-amd64/helm Jul 10 00:46:36.912800 jq[1207]: true Jul 10 00:46:36.913605 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 10 00:46:36.913627 systemd[1]: Reached target user-config.target. Jul 10 00:46:36.920026 systemd[1]: motdgen.service: Deactivated successfully. Jul 10 00:46:36.920174 systemd[1]: Finished motdgen.service. Jul 10 00:46:36.927017 extend-filesystems[1186]: Found loop1 Jul 10 00:46:36.927017 extend-filesystems[1186]: Found sr0 Jul 10 00:46:36.927017 extend-filesystems[1186]: Found vda Jul 10 00:46:36.927017 extend-filesystems[1186]: Found vda1 Jul 10 00:46:36.927017 extend-filesystems[1186]: Found vda2 Jul 10 00:46:36.927017 extend-filesystems[1186]: Found vda3 Jul 10 00:46:36.927017 extend-filesystems[1186]: Found usr Jul 10 00:46:36.927017 extend-filesystems[1186]: Found vda4 Jul 10 00:46:36.927017 extend-filesystems[1186]: Found vda6 Jul 10 00:46:36.927017 extend-filesystems[1186]: Found vda7 Jul 10 00:46:36.927017 extend-filesystems[1186]: Found vda9 Jul 10 00:46:36.927017 extend-filesystems[1186]: Checking size of /dev/vda9 Jul 10 00:46:36.941864 env[1209]: time="2025-07-10T00:46:36.926954008Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 10 00:46:36.942043 update_engine[1201]: I0710 00:46:36.941414 1201 main.cc:92] Flatcar Update Engine starting Jul 10 00:46:36.948125 systemd[1]: Started update-engine.service. Jul 10 00:46:36.951563 update_engine[1201]: I0710 00:46:36.948169 1201 update_check_scheduler.cc:74] Next update check in 5m43s Jul 10 00:46:36.950490 systemd[1]: Started locksmithd.service. Jul 10 00:46:36.957071 systemd-logind[1196]: Watching system buttons on /dev/input/event1 (Power Button) Jul 10 00:46:36.957098 systemd-logind[1196]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 10 00:46:36.957300 systemd-logind[1196]: New seat seat0. Jul 10 00:46:36.959492 extend-filesystems[1186]: Resized partition /dev/vda9 Jul 10 00:46:36.963392 extend-filesystems[1238]: resize2fs 1.46.5 (30-Dec-2021) Jul 10 00:46:36.965999 env[1209]: time="2025-07-10T00:46:36.960590503Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 10 00:46:36.965999 env[1209]: time="2025-07-10T00:46:36.961119495Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:36.966353 systemd[1]: Started systemd-logind.service. Jul 10 00:46:36.971410 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 10 00:46:36.973596 env[1209]: time="2025-07-10T00:46:36.973552400Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:46:36.973596 env[1209]: time="2025-07-10T00:46:36.973591263Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:36.989716 env[1209]: time="2025-07-10T00:46:36.989675508Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:46:36.989716 env[1209]: time="2025-07-10T00:46:36.989709172Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:36.989789 env[1209]: time="2025-07-10T00:46:36.989722677Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 10 00:46:36.989789 env[1209]: time="2025-07-10T00:46:36.989732746Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:36.989842 env[1209]: time="2025-07-10T00:46:36.989808899Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:36.990027 env[1209]: time="2025-07-10T00:46:36.989998003Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:46:36.990150 env[1209]: time="2025-07-10T00:46:36.990121195Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:46:36.990150 env[1209]: time="2025-07-10T00:46:36.990142094Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 10 00:46:36.990219 env[1209]: time="2025-07-10T00:46:36.990183672Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 10 00:46:36.990219 env[1209]: time="2025-07-10T00:46:36.990196095Z" level=info msg="metadata content store policy set" policy=shared Jul 10 00:46:36.994647 bash[1233]: Updated "/home/core/.ssh/authorized_keys" Jul 10 00:46:36.996892 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 10 00:46:37.023862 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 10 00:46:37.023914 extend-filesystems[1238]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 10 00:46:37.023914 extend-filesystems[1238]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 10 00:46:37.023914 extend-filesystems[1238]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 10 00:46:37.034516 extend-filesystems[1186]: Resized filesystem in /dev/vda9 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027063608Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027095258Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027106272Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027131994Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027144373Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027155573Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027166918Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027178146Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027189375Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027201510Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027212038Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027222086Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027314313Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 10 00:46:37.035549 env[1209]: time="2025-07-10T00:46:37.027398119Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 10 00:46:37.024687 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027651251Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027698767Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027712033Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027815937Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027831708Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027858395Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027868698Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027878757Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027889040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027898749Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027907969Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.027933107Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.028052684Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.028083640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.035908 env[1209]: time="2025-07-10T00:46:37.028097161Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.024824 systemd[1]: Finished extend-filesystems.service. Jul 10 00:46:37.036214 env[1209]: time="2025-07-10T00:46:37.028107180Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 10 00:46:37.036214 env[1209]: time="2025-07-10T00:46:37.028120299Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 10 00:46:37.036214 env[1209]: time="2025-07-10T00:46:37.028129725Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 10 00:46:37.036214 env[1209]: time="2025-07-10T00:46:37.028160097Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 10 00:46:37.036214 env[1209]: time="2025-07-10T00:46:37.028190761Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 10 00:46:37.026568 locksmithd[1235]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 10 00:46:37.031490 systemd[1]: Started containerd.service. Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.028502200Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.028571073Z" level=info msg="Connect containerd service" Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.028599233Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.029178745Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.029308878Z" level=info msg="Start subscribing containerd event" Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.029356493Z" level=info msg="Start recovering state" Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.029432305Z" level=info msg="Start event monitor" Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.029447794Z" level=info msg="Start snapshots syncer" Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.029455406Z" level=info msg="Start cni network conf syncer for default" Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.029464676Z" level=info msg="Start streaming server" Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.029608601Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.029645240Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 10 00:46:37.036565 env[1209]: time="2025-07-10T00:46:37.031923865Z" level=info msg="containerd successfully booted in 0.106726s" Jul 10 00:46:37.093518 systemd-networkd[1029]: eth0: Gained IPv6LL Jul 10 00:46:37.095400 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 10 00:46:37.096667 systemd[1]: Reached target network-online.target. Jul 10 00:46:37.098954 systemd[1]: Starting kubelet.service... Jul 10 00:46:37.369784 tar[1205]: linux-amd64/README.md Jul 10 00:46:37.374568 systemd[1]: Finished prepare-helm.service. Jul 10 00:46:37.464829 sshd_keygen[1206]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 10 00:46:37.482563 systemd[1]: Finished sshd-keygen.service. Jul 10 00:46:37.484855 systemd[1]: Starting issuegen.service... Jul 10 00:46:37.489220 systemd[1]: issuegen.service: Deactivated successfully. Jul 10 00:46:37.489341 systemd[1]: Finished issuegen.service. Jul 10 00:46:37.491259 systemd[1]: Starting systemd-user-sessions.service... Jul 10 00:46:37.495973 systemd[1]: Finished systemd-user-sessions.service. Jul 10 00:46:37.498003 systemd[1]: Started getty@tty1.service. Jul 10 00:46:37.499798 systemd[1]: Started serial-getty@ttyS0.service. Jul 10 00:46:37.500912 systemd[1]: Reached target getty.target. Jul 10 00:46:37.761937 systemd[1]: Started kubelet.service. Jul 10 00:46:37.763200 systemd[1]: Reached target multi-user.target. Jul 10 00:46:37.765251 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 10 00:46:37.772905 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 10 00:46:37.773079 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 10 00:46:37.774222 systemd[1]: Startup finished in 738ms (kernel) + 4.959s (initrd) + 5.036s (userspace) = 10.733s. Jul 10 00:46:38.166917 kubelet[1267]: E0710 00:46:38.166788 1267 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:46:38.168441 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:46:38.168584 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:46:40.450896 systemd[1]: Created slice system-sshd.slice. Jul 10 00:46:40.451829 systemd[1]: Started sshd@0-10.0.0.138:22-10.0.0.1:44666.service. Jul 10 00:46:40.487862 sshd[1276]: Accepted publickey for core from 10.0.0.1 port 44666 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:46:40.489264 sshd[1276]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:40.497363 systemd-logind[1196]: New session 1 of user core. Jul 10 00:46:40.498220 systemd[1]: Created slice user-500.slice. Jul 10 00:46:40.499280 systemd[1]: Starting user-runtime-dir@500.service... Jul 10 00:46:40.506932 systemd[1]: Finished user-runtime-dir@500.service. Jul 10 00:46:40.508135 systemd[1]: Starting user@500.service... Jul 10 00:46:40.510673 (systemd)[1279]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:40.578336 systemd[1279]: Queued start job for default target default.target. Jul 10 00:46:40.578848 systemd[1279]: Reached target paths.target. Jul 10 00:46:40.578868 systemd[1279]: Reached target sockets.target. Jul 10 00:46:40.578880 systemd[1279]: Reached target timers.target. Jul 10 00:46:40.578890 systemd[1279]: Reached target basic.target. Jul 10 00:46:40.578928 systemd[1279]: Reached target default.target. Jul 10 00:46:40.578958 systemd[1279]: Startup finished in 62ms. Jul 10 00:46:40.579029 systemd[1]: Started user@500.service. Jul 10 00:46:40.579941 systemd[1]: Started session-1.scope. Jul 10 00:46:40.629897 systemd[1]: Started sshd@1-10.0.0.138:22-10.0.0.1:44682.service. Jul 10 00:46:40.661177 sshd[1288]: Accepted publickey for core from 10.0.0.1 port 44682 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:46:40.662258 sshd[1288]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:40.665545 systemd-logind[1196]: New session 2 of user core. Jul 10 00:46:40.666572 systemd[1]: Started session-2.scope. Jul 10 00:46:40.718616 sshd[1288]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:40.721649 systemd[1]: sshd@1-10.0.0.138:22-10.0.0.1:44682.service: Deactivated successfully. Jul 10 00:46:40.722213 systemd[1]: session-2.scope: Deactivated successfully. Jul 10 00:46:40.722741 systemd-logind[1196]: Session 2 logged out. Waiting for processes to exit. Jul 10 00:46:40.723841 systemd[1]: Started sshd@2-10.0.0.138:22-10.0.0.1:44692.service. Jul 10 00:46:40.724555 systemd-logind[1196]: Removed session 2. Jul 10 00:46:40.753958 sshd[1294]: Accepted publickey for core from 10.0.0.1 port 44692 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:46:40.754991 sshd[1294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:40.758229 systemd-logind[1196]: New session 3 of user core. Jul 10 00:46:40.759037 systemd[1]: Started session-3.scope. Jul 10 00:46:40.807280 sshd[1294]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:40.809769 systemd[1]: sshd@2-10.0.0.138:22-10.0.0.1:44692.service: Deactivated successfully. Jul 10 00:46:40.810241 systemd[1]: session-3.scope: Deactivated successfully. Jul 10 00:46:40.810740 systemd-logind[1196]: Session 3 logged out. Waiting for processes to exit. Jul 10 00:46:40.811752 systemd[1]: Started sshd@3-10.0.0.138:22-10.0.0.1:44706.service. Jul 10 00:46:40.812396 systemd-logind[1196]: Removed session 3. Jul 10 00:46:40.841243 sshd[1300]: Accepted publickey for core from 10.0.0.1 port 44706 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:46:40.842274 sshd[1300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:40.845300 systemd-logind[1196]: New session 4 of user core. Jul 10 00:46:40.846038 systemd[1]: Started session-4.scope. Jul 10 00:46:40.897726 sshd[1300]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:40.900168 systemd[1]: sshd@3-10.0.0.138:22-10.0.0.1:44706.service: Deactivated successfully. Jul 10 00:46:40.900644 systemd[1]: session-4.scope: Deactivated successfully. Jul 10 00:46:40.901103 systemd-logind[1196]: Session 4 logged out. Waiting for processes to exit. Jul 10 00:46:40.902120 systemd[1]: Started sshd@4-10.0.0.138:22-10.0.0.1:44720.service. Jul 10 00:46:40.902669 systemd-logind[1196]: Removed session 4. Jul 10 00:46:40.931915 sshd[1307]: Accepted publickey for core from 10.0.0.1 port 44720 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:46:40.932935 sshd[1307]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:40.936078 systemd-logind[1196]: New session 5 of user core. Jul 10 00:46:40.936760 systemd[1]: Started session-5.scope. Jul 10 00:46:40.994172 sudo[1310]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 10 00:46:40.994549 sudo[1310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:46:41.006632 dbus-daemon[1184]: Ѝ\u000ek\xf4U: received setenforce notice (enforcing=-1588125968) Jul 10 00:46:41.008730 sudo[1310]: pam_unix(sudo:session): session closed for user root Jul 10 00:46:41.011132 sshd[1307]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:41.014717 systemd[1]: sshd@4-10.0.0.138:22-10.0.0.1:44720.service: Deactivated successfully. Jul 10 00:46:41.015349 systemd[1]: session-5.scope: Deactivated successfully. Jul 10 00:46:41.015970 systemd-logind[1196]: Session 5 logged out. Waiting for processes to exit. Jul 10 00:46:41.017199 systemd[1]: Started sshd@5-10.0.0.138:22-10.0.0.1:44732.service. Jul 10 00:46:41.017993 systemd-logind[1196]: Removed session 5. Jul 10 00:46:41.048824 sshd[1314]: Accepted publickey for core from 10.0.0.1 port 44732 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:46:41.049843 sshd[1314]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:41.053520 systemd-logind[1196]: New session 6 of user core. Jul 10 00:46:41.054182 systemd[1]: Started session-6.scope. Jul 10 00:46:41.106590 sudo[1318]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 10 00:46:41.106779 sudo[1318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:46:41.109929 sudo[1318]: pam_unix(sudo:session): session closed for user root Jul 10 00:46:41.115051 sudo[1317]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 10 00:46:41.115251 sudo[1317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:46:41.124741 systemd[1]: Stopping audit-rules.service... Jul 10 00:46:41.124000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:46:41.126100 auditctl[1321]: No rules Jul 10 00:46:41.126534 systemd[1]: audit-rules.service: Deactivated successfully. Jul 10 00:46:41.126711 kernel: kauditd_printk_skb: 268 callbacks suppressed Jul 10 00:46:41.126745 kernel: audit: type=1305 audit(1752108401.124:188): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:46:41.126709 systemd[1]: Stopped audit-rules.service. Jul 10 00:46:41.124000 audit[1321]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdbeb9bdd0 a2=420 a3=0 items=0 ppid=1 pid=1321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:41.128947 systemd[1]: Starting audit-rules.service... Jul 10 00:46:41.132638 kernel: audit: type=1300 audit(1752108401.124:188): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdbeb9bdd0 a2=420 a3=0 items=0 ppid=1 pid=1321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:41.132685 kernel: audit: type=1327 audit(1752108401.124:188): proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:46:41.124000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:46:41.133855 kernel: audit: type=1131 audit(1752108401.125:189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.125000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.146778 augenrules[1338]: No rules Jul 10 00:46:41.147521 systemd[1]: Finished audit-rules.service. Jul 10 00:46:41.148346 sudo[1317]: pam_unix(sudo:session): session closed for user root Jul 10 00:46:41.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.161964 sshd[1314]: pam_unix(sshd:session): session closed for user core Jul 10 00:46:41.147000 audit[1317]: USER_END pid=1317 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.166868 systemd[1]: sshd@5-10.0.0.138:22-10.0.0.1:44732.service: Deactivated successfully. Jul 10 00:46:41.167388 systemd[1]: session-6.scope: Deactivated successfully. Jul 10 00:46:41.167895 systemd-logind[1196]: Session 6 logged out. Waiting for processes to exit. Jul 10 00:46:41.168047 kernel: audit: type=1130 audit(1752108401.146:190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.168074 kernel: audit: type=1106 audit(1752108401.147:191): pid=1317 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.168091 kernel: audit: type=1104 audit(1752108401.147:192): pid=1317 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.147000 audit[1317]: CRED_DISP pid=1317 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.168945 systemd[1]: Started sshd@6-10.0.0.138:22-10.0.0.1:44734.service. Jul 10 00:46:41.170109 systemd-logind[1196]: Removed session 6. Jul 10 00:46:41.161000 audit[1314]: USER_END pid=1314 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:41.175247 kernel: audit: type=1106 audit(1752108401.161:193): pid=1314 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:41.175284 kernel: audit: type=1104 audit(1752108401.161:194): pid=1314 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:41.161000 audit[1314]: CRED_DISP pid=1314 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:41.178506 kernel: audit: type=1131 audit(1752108401.166:195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.138:22-10.0.0.1:44732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.138:22-10.0.0.1:44732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.138:22-10.0.0.1:44734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.203000 audit[1344]: USER_ACCT pid=1344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:41.204789 sshd[1344]: Accepted publickey for core from 10.0.0.1 port 44734 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:46:41.204000 audit[1344]: CRED_ACQ pid=1344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:41.204000 audit[1344]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec66388a0 a2=3 a3=0 items=0 ppid=1 pid=1344 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:41.204000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:46:41.205839 sshd[1344]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:46:41.209309 systemd-logind[1196]: New session 7 of user core. Jul 10 00:46:41.210120 systemd[1]: Started session-7.scope. Jul 10 00:46:41.213000 audit[1344]: USER_START pid=1344 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:41.214000 audit[1346]: CRED_ACQ pid=1346 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:46:41.261000 audit[1347]: USER_ACCT pid=1347 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.261000 audit[1347]: CRED_REFR pid=1347 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.262748 sudo[1347]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 10 00:46:41.262976 sudo[1347]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:46:41.263000 audit[1347]: USER_START pid=1347 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:46:41.283861 systemd[1]: Starting docker.service... Jul 10 00:46:41.319792 env[1360]: time="2025-07-10T00:46:41.319731836Z" level=info msg="Starting up" Jul 10 00:46:41.321153 env[1360]: time="2025-07-10T00:46:41.321103758Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:46:41.321153 env[1360]: time="2025-07-10T00:46:41.321133179Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:46:41.321153 env[1360]: time="2025-07-10T00:46:41.321153954Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:46:41.321153 env[1360]: time="2025-07-10T00:46:41.321163566Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:46:41.322661 env[1360]: time="2025-07-10T00:46:41.322637250Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:46:41.322661 env[1360]: time="2025-07-10T00:46:41.322656377Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:46:41.322726 env[1360]: time="2025-07-10T00:46:41.322669618Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:46:41.322726 env[1360]: time="2025-07-10T00:46:41.322688115Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:46:41.327294 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1587791985-merged.mount: Deactivated successfully. Jul 10 00:46:42.010650 env[1360]: time="2025-07-10T00:46:42.010584213Z" level=info msg="Loading containers: start." Jul 10 00:46:42.060000 audit[1394]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.060000 audit[1394]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff37c4f6e0 a2=0 a3=7fff37c4f6cc items=0 ppid=1360 pid=1394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.060000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 10 00:46:42.061000 audit[1396]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1396 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.061000 audit[1396]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc5d624640 a2=0 a3=7ffc5d62462c items=0 ppid=1360 pid=1396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.061000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 10 00:46:42.063000 audit[1398]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.063000 audit[1398]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd63752630 a2=0 a3=7ffd6375261c items=0 ppid=1360 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.063000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:46:42.065000 audit[1400]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.065000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe46ffe7c0 a2=0 a3=7ffe46ffe7ac items=0 ppid=1360 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.065000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:46:42.066000 audit[1402]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.066000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd325c18d0 a2=0 a3=7ffd325c18bc items=0 ppid=1360 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.066000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 10 00:46:42.091000 audit[1407]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.091000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff4730b830 a2=0 a3=7fff4730b81c items=0 ppid=1360 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.091000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 10 00:46:42.101000 audit[1409]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.101000 audit[1409]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcf63a0d60 a2=0 a3=7ffcf63a0d4c items=0 ppid=1360 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.101000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 10 00:46:42.104000 audit[1411]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.104000 audit[1411]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc36f7ac40 a2=0 a3=7ffc36f7ac2c items=0 ppid=1360 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.104000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 10 00:46:42.106000 audit[1413]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.106000 audit[1413]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffe3efb08e0 a2=0 a3=7ffe3efb08cc items=0 ppid=1360 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.106000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:46:42.115000 audit[1417]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.115000 audit[1417]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffcde95d6a0 a2=0 a3=7ffcde95d68c items=0 ppid=1360 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.115000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:46:42.120000 audit[1418]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.120000 audit[1418]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcb6b21ab0 a2=0 a3=7ffcb6b21a9c items=0 ppid=1360 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.120000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:46:42.131398 kernel: Initializing XFRM netlink socket Jul 10 00:46:42.157739 env[1360]: time="2025-07-10T00:46:42.157697551Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 10 00:46:42.171000 audit[1426]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.171000 audit[1426]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe6282f0f0 a2=0 a3=7ffe6282f0dc items=0 ppid=1360 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.171000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 10 00:46:42.185000 audit[1429]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.185000 audit[1429]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffca21cdd00 a2=0 a3=7ffca21cdcec items=0 ppid=1360 pid=1429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.185000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 10 00:46:42.188000 audit[1432]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.188000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffeca9137b0 a2=0 a3=7ffeca91379c items=0 ppid=1360 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.188000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 10 00:46:42.190000 audit[1434]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.190000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd583bb2d0 a2=0 a3=7ffd583bb2bc items=0 ppid=1360 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.190000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 10 00:46:42.192000 audit[1436]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.192000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe7da5fe00 a2=0 a3=7ffe7da5fdec items=0 ppid=1360 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.192000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 10 00:46:42.194000 audit[1438]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.194000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffeae21d2a0 a2=0 a3=7ffeae21d28c items=0 ppid=1360 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.194000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 10 00:46:42.195000 audit[1440]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.195000 audit[1440]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd351709f0 a2=0 a3=7ffd351709dc items=0 ppid=1360 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.195000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 10 00:46:42.202000 audit[1443]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.202000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd99e56c50 a2=0 a3=7ffd99e56c3c items=0 ppid=1360 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.202000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 10 00:46:42.204000 audit[1445]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.204000 audit[1445]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffc8f4fa170 a2=0 a3=7ffc8f4fa15c items=0 ppid=1360 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.204000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:46:42.206000 audit[1447]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.206000 audit[1447]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fffb5501980 a2=0 a3=7fffb550196c items=0 ppid=1360 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.206000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:46:42.208000 audit[1449]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.208000 audit[1449]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe795d8090 a2=0 a3=7ffe795d807c items=0 ppid=1360 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.208000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 10 00:46:42.210426 systemd-networkd[1029]: docker0: Link UP Jul 10 00:46:42.218000 audit[1453]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.218000 audit[1453]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff61803080 a2=0 a3=7fff6180306c items=0 ppid=1360 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.218000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:46:42.223000 audit[1454]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1454 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:46:42.223000 audit[1454]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffda274a740 a2=0 a3=7ffda274a72c items=0 ppid=1360 pid=1454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:46:42.223000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:46:42.225698 env[1360]: time="2025-07-10T00:46:42.225657379Z" level=info msg="Loading containers: done." Jul 10 00:46:42.234560 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1488463743-merged.mount: Deactivated successfully. Jul 10 00:46:42.238947 env[1360]: time="2025-07-10T00:46:42.238898188Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 10 00:46:42.239093 env[1360]: time="2025-07-10T00:46:42.239051517Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 10 00:46:42.239156 env[1360]: time="2025-07-10T00:46:42.239138643Z" level=info msg="Daemon has completed initialization" Jul 10 00:46:42.256386 systemd[1]: Started docker.service. Jul 10 00:46:42.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:42.263580 env[1360]: time="2025-07-10T00:46:42.263485277Z" level=info msg="API listen on /run/docker.sock" Jul 10 00:46:42.796123 env[1209]: time="2025-07-10T00:46:42.796079355Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 10 00:46:43.442303 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2073412834.mount: Deactivated successfully. Jul 10 00:46:45.351035 env[1209]: time="2025-07-10T00:46:45.350946960Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:45.353313 env[1209]: time="2025-07-10T00:46:45.353264380Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:45.355080 env[1209]: time="2025-07-10T00:46:45.355051235Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:45.356707 env[1209]: time="2025-07-10T00:46:45.356671721Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:45.357444 env[1209]: time="2025-07-10T00:46:45.357410739Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e\"" Jul 10 00:46:45.358009 env[1209]: time="2025-07-10T00:46:45.357987536Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 10 00:46:48.178027 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 10 00:46:48.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:48.178290 systemd[1]: Stopped kubelet.service. Jul 10 00:46:48.180118 systemd[1]: Starting kubelet.service... Jul 10 00:46:48.182808 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 10 00:46:48.182867 kernel: audit: type=1130 audit(1752108408.176:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:48.182893 kernel: audit: type=1131 audit(1752108408.176:231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:48.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:48.271685 systemd[1]: Started kubelet.service. Jul 10 00:46:48.271000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:48.288408 kernel: audit: type=1130 audit(1752108408.271:232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:48.628442 kubelet[1494]: E0710 00:46:48.628288 1494 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:46:48.631617 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:46:48.631745 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:46:48.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:46:48.653401 kernel: audit: type=1131 audit(1752108408.630:233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:46:48.903523 env[1209]: time="2025-07-10T00:46:48.903369031Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:48.905747 env[1209]: time="2025-07-10T00:46:48.905708152Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:48.907823 env[1209]: time="2025-07-10T00:46:48.907774801Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:48.909644 env[1209]: time="2025-07-10T00:46:48.909586550Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:48.912408 env[1209]: time="2025-07-10T00:46:48.912336526Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2\"" Jul 10 00:46:48.912999 env[1209]: time="2025-07-10T00:46:48.912962147Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 10 00:46:50.695489 env[1209]: time="2025-07-10T00:46:50.695417144Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:50.698036 env[1209]: time="2025-07-10T00:46:50.697986997Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:50.701212 env[1209]: time="2025-07-10T00:46:50.701177458Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:50.703771 env[1209]: time="2025-07-10T00:46:50.703710408Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:50.704569 env[1209]: time="2025-07-10T00:46:50.704527224Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b\"" Jul 10 00:46:50.705069 env[1209]: time="2025-07-10T00:46:50.705027385Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 10 00:46:51.820835 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3084474763.mount: Deactivated successfully. Jul 10 00:46:53.426318 env[1209]: time="2025-07-10T00:46:53.426241995Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:53.428508 env[1209]: time="2025-07-10T00:46:53.428450856Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:53.432150 env[1209]: time="2025-07-10T00:46:53.432085811Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:53.432715 env[1209]: time="2025-07-10T00:46:53.432673649Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:53.433225 env[1209]: time="2025-07-10T00:46:53.433189872Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19\"" Jul 10 00:46:53.433692 env[1209]: time="2025-07-10T00:46:53.433668925Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 10 00:46:54.225757 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount330403977.mount: Deactivated successfully. Jul 10 00:46:55.261173 env[1209]: time="2025-07-10T00:46:55.261100208Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:55.263048 env[1209]: time="2025-07-10T00:46:55.262998472Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:55.264805 env[1209]: time="2025-07-10T00:46:55.264761885Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:55.266478 env[1209]: time="2025-07-10T00:46:55.266442105Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:55.267094 env[1209]: time="2025-07-10T00:46:55.267064857Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Jul 10 00:46:55.267672 env[1209]: time="2025-07-10T00:46:55.267649340Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 10 00:46:55.789840 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount807543026.mount: Deactivated successfully. Jul 10 00:46:55.795677 env[1209]: time="2025-07-10T00:46:55.795640692Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:55.798059 env[1209]: time="2025-07-10T00:46:55.798023448Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:55.800985 env[1209]: time="2025-07-10T00:46:55.800960173Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:55.801858 env[1209]: time="2025-07-10T00:46:55.801818048Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:46:55.802511 env[1209]: time="2025-07-10T00:46:55.802482695Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 10 00:46:55.803102 env[1209]: time="2025-07-10T00:46:55.803060422Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 10 00:46:56.276098 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3587995754.mount: Deactivated successfully. Jul 10 00:46:58.677786 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 10 00:46:58.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:58.677965 systemd[1]: Stopped kubelet.service. Jul 10 00:46:58.679457 systemd[1]: Starting kubelet.service... Jul 10 00:46:58.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:58.684337 kernel: audit: type=1130 audit(1752108418.676:234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:58.684418 kernel: audit: type=1131 audit(1752108418.676:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:58.763725 systemd[1]: Started kubelet.service. Jul 10 00:46:58.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:58.767419 kernel: audit: type=1130 audit(1752108418.762:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:46:59.037304 kubelet[1506]: E0710 00:46:59.037157 1506 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:46:59.039256 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:46:59.039397 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:46:59.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:46:59.043406 kernel: audit: type=1131 audit(1752108419.039:237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:47:00.031284 env[1209]: time="2025-07-10T00:47:00.031213340Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:00.033628 env[1209]: time="2025-07-10T00:47:00.033584178Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:00.035646 env[1209]: time="2025-07-10T00:47:00.035615345Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:00.037399 env[1209]: time="2025-07-10T00:47:00.037355073Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:00.038135 env[1209]: time="2025-07-10T00:47:00.038101806Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Jul 10 00:47:03.204614 systemd[1]: Stopped kubelet.service. Jul 10 00:47:03.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:03.206588 systemd[1]: Starting kubelet.service... Jul 10 00:47:03.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:03.210754 kernel: audit: type=1130 audit(1752108423.204:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:03.210878 kernel: audit: type=1131 audit(1752108423.204:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:03.228652 systemd[1]: Reloading. Jul 10 00:47:03.291628 /usr/lib/systemd/system-generators/torcx-generator[1563]: time="2025-07-10T00:47:03Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:47:03.291981 /usr/lib/systemd/system-generators/torcx-generator[1563]: time="2025-07-10T00:47:03Z" level=info msg="torcx already run" Jul 10 00:47:03.532833 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:47:03.532851 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:47:03.550068 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:47:03.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.615106 kernel: audit: type=1400 audit(1752108423.607:240): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.615166 kernel: audit: type=1400 audit(1752108423.607:241): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.615188 kernel: audit: type=1400 audit(1752108423.607:242): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620696 kernel: audit: type=1400 audit(1752108423.607:243): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.613000 audit: BPF prog-id=40 op=LOAD Jul 10 00:47:03.613000 audit: BPF prog-id=34 op=UNLOAD Jul 10 00:47:03.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.616000 audit: BPF prog-id=41 op=LOAD Jul 10 00:47:03.616000 audit: BPF prog-id=24 op=UNLOAD Jul 10 00:47:03.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.616000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.616000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit: BPF prog-id=42 op=LOAD Jul 10 00:47:03.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.619000 audit: BPF prog-id=43 op=LOAD Jul 10 00:47:03.619000 audit: BPF prog-id=25 op=UNLOAD Jul 10 00:47:03.619000 audit: BPF prog-id=26 op=UNLOAD Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit: BPF prog-id=44 op=LOAD Jul 10 00:47:03.620000 audit: BPF prog-id=35 op=UNLOAD Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit: BPF prog-id=45 op=LOAD Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.620000 audit: BPF prog-id=46 op=LOAD Jul 10 00:47:03.620000 audit: BPF prog-id=36 op=UNLOAD Jul 10 00:47:03.620000 audit: BPF prog-id=37 op=UNLOAD Jul 10 00:47:03.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.621000 audit: BPF prog-id=47 op=LOAD Jul 10 00:47:03.621000 audit: BPF prog-id=33 op=UNLOAD Jul 10 00:47:03.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.622000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.622000 audit: BPF prog-id=48 op=LOAD Jul 10 00:47:03.622000 audit: BPF prog-id=27 op=UNLOAD Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit: BPF prog-id=49 op=LOAD Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.623000 audit: BPF prog-id=50 op=LOAD Jul 10 00:47:03.623000 audit: BPF prog-id=28 op=UNLOAD Jul 10 00:47:03.623000 audit: BPF prog-id=29 op=UNLOAD Jul 10 00:47:03.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.624000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.624000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.624000 audit: BPF prog-id=51 op=LOAD Jul 10 00:47:03.624000 audit: BPF prog-id=38 op=UNLOAD Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit: BPF prog-id=52 op=LOAD Jul 10 00:47:03.625000 audit: BPF prog-id=30 op=UNLOAD Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit: BPF prog-id=53 op=LOAD Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:03.625000 audit: BPF prog-id=54 op=LOAD Jul 10 00:47:03.625000 audit: BPF prog-id=31 op=UNLOAD Jul 10 00:47:03.625000 audit: BPF prog-id=32 op=UNLOAD Jul 10 00:47:03.638905 systemd[1]: Started kubelet.service. Jul 10 00:47:03.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:03.640205 systemd[1]: Stopping kubelet.service... Jul 10 00:47:03.640954 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:47:03.641100 systemd[1]: Stopped kubelet.service. Jul 10 00:47:03.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:03.642463 systemd[1]: Starting kubelet.service... Jul 10 00:47:03.736253 systemd[1]: Started kubelet.service. Jul 10 00:47:03.740337 kernel: kauditd_printk_skb: 170 callbacks suppressed Jul 10 00:47:03.740494 kernel: audit: type=1130 audit(1752108423.735:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:03.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:03.771083 kubelet[1610]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:47:03.771083 kubelet[1610]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 00:47:03.771083 kubelet[1610]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:47:03.771607 kubelet[1610]: I0710 00:47:03.771105 1610 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:47:04.007183 kubelet[1610]: I0710 00:47:04.007142 1610 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 10 00:47:04.007183 kubelet[1610]: I0710 00:47:04.007183 1610 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:47:04.007665 kubelet[1610]: I0710 00:47:04.007636 1610 server.go:956] "Client rotation is on, will bootstrap in background" Jul 10 00:47:04.037802 kubelet[1610]: E0710 00:47:04.037760 1610 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.138:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 10 00:47:04.037992 kubelet[1610]: I0710 00:47:04.037972 1610 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:47:04.045573 kubelet[1610]: E0710 00:47:04.045543 1610 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:47:04.045573 kubelet[1610]: I0710 00:47:04.045571 1610 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:47:04.049413 kubelet[1610]: I0710 00:47:04.049397 1610 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:47:04.049652 kubelet[1610]: I0710 00:47:04.049618 1610 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:47:04.049778 kubelet[1610]: I0710 00:47:04.049645 1610 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:47:04.049864 kubelet[1610]: I0710 00:47:04.049784 1610 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:47:04.049864 kubelet[1610]: I0710 00:47:04.049792 1610 container_manager_linux.go:303] "Creating device plugin manager" Jul 10 00:47:04.049911 kubelet[1610]: I0710 00:47:04.049885 1610 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:47:04.055389 kubelet[1610]: I0710 00:47:04.055357 1610 kubelet.go:480] "Attempting to sync node with API server" Jul 10 00:47:04.055432 kubelet[1610]: I0710 00:47:04.055392 1610 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:47:04.055432 kubelet[1610]: I0710 00:47:04.055421 1610 kubelet.go:386] "Adding apiserver pod source" Jul 10 00:47:04.059514 kubelet[1610]: I0710 00:47:04.059494 1610 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:47:04.070264 kubelet[1610]: E0710 00:47:04.070203 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.138:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 10 00:47:04.070390 kubelet[1610]: E0710 00:47:04.070327 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.138:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 10 00:47:04.074139 kubelet[1610]: I0710 00:47:04.074108 1610 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:47:04.074736 kubelet[1610]: I0710 00:47:04.074705 1610 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 10 00:47:04.076601 kubelet[1610]: W0710 00:47:04.076571 1610 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 10 00:47:04.078555 kubelet[1610]: I0710 00:47:04.078537 1610 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 00:47:04.078602 kubelet[1610]: I0710 00:47:04.078583 1610 server.go:1289] "Started kubelet" Jul 10 00:47:04.078731 kubelet[1610]: I0710 00:47:04.078685 1610 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:47:04.078000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:04.079661 kubelet[1610]: I0710 00:47:04.079564 1610 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:47:04.079661 kubelet[1610]: I0710 00:47:04.079596 1610 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 00:47:04.079752 kubelet[1610]: I0710 00:47:04.079734 1610 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:47:04.081039 kubelet[1610]: I0710 00:47:04.080684 1610 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:47:04.081039 kubelet[1610]: I0710 00:47:04.080716 1610 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:47:04.081459 kubelet[1610]: I0710 00:47:04.081433 1610 server.go:317] "Adding debug handlers to kubelet server" Jul 10 00:47:04.082457 kubelet[1610]: E0710 00:47:04.082163 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:04.082457 kubelet[1610]: I0710 00:47:04.082186 1610 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 00:47:04.082457 kubelet[1610]: I0710 00:47:04.082317 1610 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 00:47:04.082457 kubelet[1610]: I0710 00:47:04.082362 1610 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:47:04.082641 kubelet[1610]: I0710 00:47:04.082553 1610 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:47:04.078000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:04.083441 kubelet[1610]: E0710 00:47:04.082702 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.138:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 10 00:47:04.083872 kubelet[1610]: E0710 00:47:04.083823 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.138:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.138:6443: connect: connection refused" interval="200ms" Jul 10 00:47:04.084075 kubelet[1610]: I0710 00:47:04.084054 1610 factory.go:223] Registration of the systemd container factory successfully Jul 10 00:47:04.084130 kubelet[1610]: I0710 00:47:04.084116 1610 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:47:04.084521 kubelet[1610]: E0710 00:47:04.084501 1610 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:47:04.084814 kubelet[1610]: I0710 00:47:04.084798 1610 factory.go:223] Registration of the containerd container factory successfully Jul 10 00:47:04.085090 kernel: audit: type=1400 audit(1752108424.078:415): avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:04.085132 kernel: audit: type=1401 audit(1752108424.078:415): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:04.085148 kernel: audit: type=1300 audit(1752108424.078:415): arch=c000003e syscall=188 success=no exit=-22 a0=c000710630 a1=c000c28d38 a2=c000710600 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.078000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000710630 a1=c000c28d38 a2=c000710600 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.089827 kubelet[1610]: E0710 00:47:04.088744 1610 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.138:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.138:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850bd54212bf5f4 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 00:47:04.078554612 +0000 UTC m=+0.339158718,LastTimestamp:2025-07-10 00:47:04.078554612 +0000 UTC m=+0.339158718,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 00:47:04.078000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:04.094895 kernel: audit: type=1327 audit(1752108424.078:415): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:04.078000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:04.095127 kubelet[1610]: I0710 00:47:04.095008 1610 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 00:47:04.095127 kubelet[1610]: I0710 00:47:04.095031 1610 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 00:47:04.095127 kubelet[1610]: I0710 00:47:04.095083 1610 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:47:04.098002 kernel: audit: type=1400 audit(1752108424.078:416): avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:04.098079 kernel: audit: type=1401 audit(1752108424.078:416): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:04.078000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:04.099507 kernel: audit: type=1300 audit(1752108424.078:416): arch=c000003e syscall=188 success=no exit=-22 a0=c00076a340 a1=c000c28d50 a2=c0007106c0 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.078000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00076a340 a1=c000c28d50 a2=c0007106c0 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.103686 kernel: audit: type=1327 audit(1752108424.078:416): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:04.078000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:04.107472 kernel: audit: type=1325 audit(1752108424.090:417): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:04.090000 audit[1627]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:04.090000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff768b44f0 a2=0 a3=7fff768b44dc items=0 ppid=1610 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.090000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:47:04.091000 audit[1629]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:04.091000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd2c9b640 a2=0 a3=7ffcd2c9b62c items=0 ppid=1610 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:47:04.093000 audit[1632]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:04.093000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff30e19a20 a2=0 a3=7fff30e19a0c items=0 ppid=1610 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.093000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:47:04.095000 audit[1634]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:04.095000 audit[1634]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc32e8d8f0 a2=0 a3=7ffc32e8d8dc items=0 ppid=1610 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.095000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:47:04.182783 kubelet[1610]: E0710 00:47:04.182755 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:04.283910 kubelet[1610]: E0710 00:47:04.283793 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:04.284346 kubelet[1610]: E0710 00:47:04.284320 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.138:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.138:6443: connect: connection refused" interval="400ms" Jul 10 00:47:04.384453 kubelet[1610]: E0710 00:47:04.384429 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:04.484793 kubelet[1610]: E0710 00:47:04.484764 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:04.585561 kubelet[1610]: E0710 00:47:04.585508 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:04.685221 kubelet[1610]: E0710 00:47:04.685164 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.138:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.138:6443: connect: connection refused" interval="800ms" Jul 10 00:47:04.686312 kubelet[1610]: E0710 00:47:04.686282 1610 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:47:04.698363 kubelet[1610]: I0710 00:47:04.698337 1610 policy_none.go:49] "None policy: Start" Jul 10 00:47:04.698363 kubelet[1610]: I0710 00:47:04.698357 1610 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 00:47:04.698363 kubelet[1610]: I0710 00:47:04.698368 1610 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:47:04.700000 audit[1640]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:04.700000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffcc7216ec0 a2=0 a3=7ffcc7216eac items=0 ppid=1610 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.700000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 10 00:47:04.701483 kubelet[1610]: I0710 00:47:04.701387 1610 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 10 00:47:04.701000 audit[1641]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:04.701000 audit[1641]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc13baaec0 a2=0 a3=7ffc13baaeac items=0 ppid=1610 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.701000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:47:04.702364 kubelet[1610]: I0710 00:47:04.702252 1610 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 10 00:47:04.702364 kubelet[1610]: I0710 00:47:04.702264 1610 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 10 00:47:04.702364 kubelet[1610]: I0710 00:47:04.702280 1610 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 00:47:04.702364 kubelet[1610]: I0710 00:47:04.702286 1610 kubelet.go:2436] "Starting kubelet main sync loop" Jul 10 00:47:04.702364 kubelet[1610]: E0710 00:47:04.702317 1610 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:47:04.703133 kubelet[1610]: E0710 00:47:04.703093 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.138:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 10 00:47:04.702000 audit[1644]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:04.702000 audit[1644]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffc9f5d460 a2=0 a3=7fffc9f5d44c items=0 ppid=1610 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.702000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:47:04.703000 audit[1642]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:04.703000 audit[1642]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe2c895f80 a2=0 a3=10e3 items=0 ppid=1610 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.703000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:47:04.704000 audit[1646]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:04.704000 audit[1646]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffcd608d4e0 a2=0 a3=7ffcd608d4cc items=0 ppid=1610 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.704000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:47:04.704000 audit[1648]: NETFILTER_CFG table=filter:35 family=10 entries=2 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:04.704000 audit[1648]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff7b5d10d0 a2=0 a3=7fff7b5d10bc items=0 ppid=1610 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.704000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:47:04.705000 audit[1647]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:04.705000 audit[1647]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9e3e04c0 a2=0 a3=7ffd9e3e04ac items=0 ppid=1610 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.705000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:47:04.705787 systemd[1]: Created slice kubepods.slice. Jul 10 00:47:04.706000 audit[1649]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:04.706000 audit[1649]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd084db880 a2=0 a3=7ffd084db86c items=0 ppid=1610 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.706000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:47:04.709978 systemd[1]: Created slice kubepods-burstable.slice. Jul 10 00:47:04.712709 systemd[1]: Created slice kubepods-besteffort.slice. Jul 10 00:47:04.718038 kubelet[1610]: E0710 00:47:04.718014 1610 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 10 00:47:04.717000 audit[1610]: AVC avc: denied { mac_admin } for pid=1610 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:04.717000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:04.717000 audit[1610]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000eec120 a1=c000e7e3a8 a2=c000eec0f0 a3=25 items=0 ppid=1 pid=1610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:04.717000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:04.718265 kubelet[1610]: E0710 00:47:04.718078 1610 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 10 00:47:04.718265 kubelet[1610]: I0710 00:47:04.718170 1610 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:47:04.718265 kubelet[1610]: I0710 00:47:04.718179 1610 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:47:04.718546 kubelet[1610]: I0710 00:47:04.718409 1610 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:47:04.719778 kubelet[1610]: E0710 00:47:04.719734 1610 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 00:47:04.719838 kubelet[1610]: E0710 00:47:04.719786 1610 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 10 00:47:04.809776 systemd[1]: Created slice kubepods-burstable-pod2c375ef08d0e79597ba6450f841e241a.slice. Jul 10 00:47:04.814863 kubelet[1610]: E0710 00:47:04.814832 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:47:04.816837 systemd[1]: Created slice kubepods-burstable-pod84b858ec27c8b2738b1d9ff9927e0dcb.slice. Jul 10 00:47:04.818008 kubelet[1610]: E0710 00:47:04.817975 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:47:04.819047 systemd[1]: Created slice kubepods-burstable-pod834ee54f1daa06092e339273649eb5ea.slice. Jul 10 00:47:04.819606 kubelet[1610]: I0710 00:47:04.819591 1610 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:47:04.819870 kubelet[1610]: E0710 00:47:04.819848 1610 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.138:6443/api/v1/nodes\": dial tcp 10.0.0.138:6443: connect: connection refused" node="localhost" Jul 10 00:47:04.820432 kubelet[1610]: E0710 00:47:04.820410 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:47:04.887431 kubelet[1610]: I0710 00:47:04.886786 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2c375ef08d0e79597ba6450f841e241a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"2c375ef08d0e79597ba6450f841e241a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:04.887431 kubelet[1610]: I0710 00:47:04.886810 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:04.887431 kubelet[1610]: I0710 00:47:04.886824 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:04.887431 kubelet[1610]: I0710 00:47:04.886838 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:04.887431 kubelet[1610]: I0710 00:47:04.886851 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:04.887668 kubelet[1610]: I0710 00:47:04.886867 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2c375ef08d0e79597ba6450f841e241a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"2c375ef08d0e79597ba6450f841e241a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:04.887668 kubelet[1610]: I0710 00:47:04.886879 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2c375ef08d0e79597ba6450f841e241a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"2c375ef08d0e79597ba6450f841e241a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:04.887668 kubelet[1610]: I0710 00:47:04.886903 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:04.887668 kubelet[1610]: I0710 00:47:04.886923 1610 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:05.021009 kubelet[1610]: I0710 00:47:05.020993 1610 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:47:05.021258 kubelet[1610]: E0710 00:47:05.021219 1610 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.138:6443/api/v1/nodes\": dial tcp 10.0.0.138:6443: connect: connection refused" node="localhost" Jul 10 00:47:05.075303 kubelet[1610]: E0710 00:47:05.075261 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://10.0.0.138:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 10 00:47:05.115213 kubelet[1610]: E0710 00:47:05.115181 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:05.115801 env[1209]: time="2025-07-10T00:47:05.115763528Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:2c375ef08d0e79597ba6450f841e241a,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:05.118944 kubelet[1610]: E0710 00:47:05.118921 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:05.119299 env[1209]: time="2025-07-10T00:47:05.119277207Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:05.121514 kubelet[1610]: E0710 00:47:05.121490 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:05.121736 env[1209]: time="2025-07-10T00:47:05.121715020Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:05.423369 kubelet[1610]: I0710 00:47:05.423335 1610 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:47:05.423720 kubelet[1610]: E0710 00:47:05.423687 1610 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.138:6443/api/v1/nodes\": dial tcp 10.0.0.138:6443: connect: connection refused" node="localhost" Jul 10 00:47:05.472216 kubelet[1610]: E0710 00:47:05.472184 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://10.0.0.138:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 10 00:47:05.486080 kubelet[1610]: E0710 00:47:05.486047 1610 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.138:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.138:6443: connect: connection refused" interval="1.6s" Jul 10 00:47:05.585226 kubelet[1610]: E0710 00:47:05.585189 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://10.0.0.138:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 10 00:47:05.880204 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2657779360.mount: Deactivated successfully. Jul 10 00:47:05.886165 env[1209]: time="2025-07-10T00:47:05.886105430Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.889520 env[1209]: time="2025-07-10T00:47:05.889492382Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.891067 env[1209]: time="2025-07-10T00:47:05.891036044Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.892189 env[1209]: time="2025-07-10T00:47:05.892148394Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.895845 env[1209]: time="2025-07-10T00:47:05.895802336Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.897366 env[1209]: time="2025-07-10T00:47:05.897335625Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.898420 env[1209]: time="2025-07-10T00:47:05.898391305Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.900054 env[1209]: time="2025-07-10T00:47:05.900025369Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.901959 env[1209]: time="2025-07-10T00:47:05.901926571Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.903366 env[1209]: time="2025-07-10T00:47:05.903337549Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.904583 env[1209]: time="2025-07-10T00:47:05.904557662Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.905765 env[1209]: time="2025-07-10T00:47:05.905739949Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:05.918095 kubelet[1610]: E0710 00:47:05.918056 1610 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://10.0.0.138:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 10 00:47:05.921637 env[1209]: time="2025-07-10T00:47:05.921562411Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:05.921851 env[1209]: time="2025-07-10T00:47:05.921602520Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:05.921851 env[1209]: time="2025-07-10T00:47:05.921613843Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:05.922015 env[1209]: time="2025-07-10T00:47:05.921943250Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e976027cffa74f481e0b5fc7fc71d834488619bc6a094f1d64e895623069d266 pid=1657 runtime=io.containerd.runc.v2 Jul 10 00:47:05.936415 systemd[1]: Started cri-containerd-e976027cffa74f481e0b5fc7fc71d834488619bc6a094f1d64e895623069d266.scope. Jul 10 00:47:05.941955 env[1209]: time="2025-07-10T00:47:05.941859985Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:05.941955 env[1209]: time="2025-07-10T00:47:05.941944199Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:05.942159 env[1209]: time="2025-07-10T00:47:05.941970141Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:05.943012 env[1209]: time="2025-07-10T00:47:05.942182372Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/78e5db1815de06ead5db8443d6b15e769f3066f1f9496f3722a624abd1803828 pid=1683 runtime=io.containerd.runc.v2 Jul 10 00:47:05.945440 env[1209]: time="2025-07-10T00:47:05.945304478Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:05.945440 env[1209]: time="2025-07-10T00:47:05.945365734Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:05.945440 env[1209]: time="2025-07-10T00:47:05.945415775Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:05.945708 env[1209]: time="2025-07-10T00:47:05.945654540Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ffe974785c1c6a0b95851af2f89698da80b8831715c2b27c792738750efd507c pid=1709 runtime=io.containerd.runc.v2 Jul 10 00:47:05.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.946000 audit: BPF prog-id=55 op=LOAD Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539373630323763666661373466343831653062356663376663373164 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539373630323763666661373466343831653062356663376663373164 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit: BPF prog-id=56 op=LOAD Jul 10 00:47:05.947000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003b6a00 items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539373630323763666661373466343831653062356663376663373164 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit: BPF prog-id=57 op=LOAD Jul 10 00:47:05.947000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003b6a48 items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539373630323763666661373466343831653062356663376663373164 Jul 10 00:47:05.947000 audit: BPF prog-id=57 op=UNLOAD Jul 10 00:47:05.947000 audit: BPF prog-id=56 op=UNLOAD Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.947000 audit: BPF prog-id=58 op=LOAD Jul 10 00:47:05.947000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003b6e58 items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539373630323763666661373466343831653062356663376663373164 Jul 10 00:47:05.954124 systemd[1]: Started cri-containerd-78e5db1815de06ead5db8443d6b15e769f3066f1f9496f3722a624abd1803828.scope. Jul 10 00:47:05.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit: BPF prog-id=59 op=LOAD Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1683 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738653564623138313564653036656164356462383434336436623135 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1683 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738653564623138313564653036656164356462383434336436623135 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.964000 audit: BPF prog-id=60 op=LOAD Jul 10 00:47:05.964000 audit[1710]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00038e7d0 items=0 ppid=1683 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738653564623138313564653036656164356462383434336436623135 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit: BPF prog-id=61 op=LOAD Jul 10 00:47:05.965000 audit[1710]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00038e818 items=0 ppid=1683 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738653564623138313564653036656164356462383434336436623135 Jul 10 00:47:05.965000 audit: BPF prog-id=61 op=UNLOAD Jul 10 00:47:05.965000 audit: BPF prog-id=60 op=UNLOAD Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { perfmon } for pid=1710 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit[1710]: AVC avc: denied { bpf } for pid=1710 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.965000 audit: BPF prog-id=62 op=LOAD Jul 10 00:47:05.965000 audit[1710]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00038ec28 items=0 ppid=1683 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.965000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738653564623138313564653036656164356462383434336436623135 Jul 10 00:47:05.969899 systemd[1]: Started cri-containerd-ffe974785c1c6a0b95851af2f89698da80b8831715c2b27c792738750efd507c.scope. Jul 10 00:47:05.982666 env[1209]: time="2025-07-10T00:47:05.980605456Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:2c375ef08d0e79597ba6450f841e241a,Namespace:kube-system,Attempt:0,} returns sandbox id \"e976027cffa74f481e0b5fc7fc71d834488619bc6a094f1d64e895623069d266\"" Jul 10 00:47:05.982820 kubelet[1610]: E0710 00:47:05.981795 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:05.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.984000 audit: BPF prog-id=63 op=LOAD Jul 10 00:47:05.984000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.984000 audit[1719]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1709 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666653937343738356331633661306239353835316166326638393639 Jul 10 00:47:05.984000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.984000 audit[1719]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1709 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666653937343738356331633661306239353835316166326638393639 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit: BPF prog-id=64 op=LOAD Jul 10 00:47:05.985000 audit[1719]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00019cba0 items=0 ppid=1709 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666653937343738356331633661306239353835316166326638393639 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.985000 audit: BPF prog-id=65 op=LOAD Jul 10 00:47:05.985000 audit[1719]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00019cbe8 items=0 ppid=1709 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666653937343738356331633661306239353835316166326638393639 Jul 10 00:47:05.986000 audit: BPF prog-id=65 op=UNLOAD Jul 10 00:47:05.986000 audit: BPF prog-id=64 op=UNLOAD Jul 10 00:47:05.986000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.986000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.986000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.986000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.986000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.986000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.986000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.986000 audit[1719]: AVC avc: denied { perfmon } for pid=1719 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.986000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.986000 audit[1719]: AVC avc: denied { bpf } for pid=1719 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:05.986000 audit: BPF prog-id=66 op=LOAD Jul 10 00:47:05.987753 env[1209]: time="2025-07-10T00:47:05.987630581Z" level=info msg="CreateContainer within sandbox \"e976027cffa74f481e0b5fc7fc71d834488619bc6a094f1d64e895623069d266\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 10 00:47:05.986000 audit[1719]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00019cff8 items=0 ppid=1709 pid=1719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:05.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666653937343738356331633661306239353835316166326638393639 Jul 10 00:47:05.995049 env[1209]: time="2025-07-10T00:47:05.994998928Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,} returns sandbox id \"78e5db1815de06ead5db8443d6b15e769f3066f1f9496f3722a624abd1803828\"" Jul 10 00:47:05.995724 kubelet[1610]: E0710 00:47:05.995692 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:05.999889 env[1209]: time="2025-07-10T00:47:05.999859707Z" level=info msg="CreateContainer within sandbox \"78e5db1815de06ead5db8443d6b15e769f3066f1f9496f3722a624abd1803828\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 10 00:47:06.008707 env[1209]: time="2025-07-10T00:47:06.008657131Z" level=info msg="CreateContainer within sandbox \"e976027cffa74f481e0b5fc7fc71d834488619bc6a094f1d64e895623069d266\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"2332a146d7f7843db7777616c15488dace1cc677a9eb5e19d6abad634e2afc85\"" Jul 10 00:47:06.009421 env[1209]: time="2025-07-10T00:47:06.009399726Z" level=info msg="StartContainer for \"2332a146d7f7843db7777616c15488dace1cc677a9eb5e19d6abad634e2afc85\"" Jul 10 00:47:06.014578 env[1209]: time="2025-07-10T00:47:06.014536668Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,} returns sandbox id \"ffe974785c1c6a0b95851af2f89698da80b8831715c2b27c792738750efd507c\"" Jul 10 00:47:06.015219 kubelet[1610]: E0710 00:47:06.015183 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:06.020737 env[1209]: time="2025-07-10T00:47:06.020706676Z" level=info msg="CreateContainer within sandbox \"ffe974785c1c6a0b95851af2f89698da80b8831715c2b27c792738750efd507c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 10 00:47:06.022919 env[1209]: time="2025-07-10T00:47:06.022884414Z" level=info msg="CreateContainer within sandbox \"78e5db1815de06ead5db8443d6b15e769f3066f1f9496f3722a624abd1803828\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"366a78cf689683af26437fef5464c5b774231dd5e9391ba87690f6193bd95783\"" Jul 10 00:47:06.023448 env[1209]: time="2025-07-10T00:47:06.023409493Z" level=info msg="StartContainer for \"366a78cf689683af26437fef5464c5b774231dd5e9391ba87690f6193bd95783\"" Jul 10 00:47:06.027213 systemd[1]: Started cri-containerd-2332a146d7f7843db7777616c15488dace1cc677a9eb5e19d6abad634e2afc85.scope. Jul 10 00:47:06.036082 env[1209]: time="2025-07-10T00:47:06.036049603Z" level=info msg="CreateContainer within sandbox \"ffe974785c1c6a0b95851af2f89698da80b8831715c2b27c792738750efd507c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"391a4f7807850f49b889d3a9418e6b2e08f4e88e0e063757dc16a8b5ccbd4bfa\"" Jul 10 00:47:06.036592 env[1209]: time="2025-07-10T00:47:06.036573190Z" level=info msg="StartContainer for \"391a4f7807850f49b889d3a9418e6b2e08f4e88e0e063757dc16a8b5ccbd4bfa\"" Jul 10 00:47:06.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.041000 audit: BPF prog-id=67 op=LOAD Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1657 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233333261313436643766373834336462373737373631366331353438 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1657 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233333261313436643766373834336462373737373631366331353438 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit: BPF prog-id=68 op=LOAD Jul 10 00:47:06.042000 audit[1783]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00035e2a0 items=0 ppid=1657 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233333261313436643766373834336462373737373631366331353438 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit: BPF prog-id=69 op=LOAD Jul 10 00:47:06.042000 audit[1783]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00035e2e8 items=0 ppid=1657 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233333261313436643766373834336462373737373631366331353438 Jul 10 00:47:06.042000 audit: BPF prog-id=69 op=UNLOAD Jul 10 00:47:06.042000 audit: BPF prog-id=68 op=UNLOAD Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { perfmon } for pid=1783 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit[1783]: AVC avc: denied { bpf } for pid=1783 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.042000 audit: BPF prog-id=70 op=LOAD Jul 10 00:47:06.042000 audit[1783]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00035e6f8 items=0 ppid=1657 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233333261313436643766373834336462373737373631366331353438 Jul 10 00:47:06.040360 systemd[1]: Started cri-containerd-366a78cf689683af26437fef5464c5b774231dd5e9391ba87690f6193bd95783.scope. Jul 10 00:47:06.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.052000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.052000 audit: BPF prog-id=71 op=LOAD Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1683 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336366137386366363839363833616632363433376665663534363463 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1683 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336366137386366363839363833616632363433376665663534363463 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit: BPF prog-id=72 op=LOAD Jul 10 00:47:06.053000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00023e900 items=0 ppid=1683 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336366137386366363839363833616632363433376665663534363463 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit: BPF prog-id=73 op=LOAD Jul 10 00:47:06.053000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00023e948 items=0 ppid=1683 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336366137386366363839363833616632363433376665663534363463 Jul 10 00:47:06.053000 audit: BPF prog-id=73 op=UNLOAD Jul 10 00:47:06.053000 audit: BPF prog-id=72 op=UNLOAD Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.053000 audit: BPF prog-id=74 op=LOAD Jul 10 00:47:06.053000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00023ed58 items=0 ppid=1683 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336366137386366363839363833616632363433376665663534363463 Jul 10 00:47:06.057287 systemd[1]: Started cri-containerd-391a4f7807850f49b889d3a9418e6b2e08f4e88e0e063757dc16a8b5ccbd4bfa.scope. Jul 10 00:47:06.058101 kubelet[1610]: E0710 00:47:06.057312 1610 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://10.0.0.138:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 10 00:47:06.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit: BPF prog-id=75 op=LOAD Jul 10 00:47:06.073113 env[1209]: time="2025-07-10T00:47:06.072813986Z" level=info msg="StartContainer for \"2332a146d7f7843db7777616c15488dace1cc677a9eb5e19d6abad634e2afc85\" returns successfully" Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1709 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339316134663738303738353066343962383839643361393431386536 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1709 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339316134663738303738353066343962383839643361393431386536 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit: BPF prog-id=76 op=LOAD Jul 10 00:47:06.072000 audit[1829]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0000248a0 items=0 ppid=1709 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339316134663738303738353066343962383839643361393431386536 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.072000 audit: BPF prog-id=77 op=LOAD Jul 10 00:47:06.072000 audit[1829]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000248e8 items=0 ppid=1709 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339316134663738303738353066343962383839643361393431386536 Jul 10 00:47:06.073000 audit: BPF prog-id=77 op=UNLOAD Jul 10 00:47:06.073000 audit: BPF prog-id=76 op=UNLOAD Jul 10 00:47:06.073000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.073000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.073000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.073000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.073000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.073000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.073000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.073000 audit[1829]: AVC avc: denied { perfmon } for pid=1829 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.073000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.073000 audit[1829]: AVC avc: denied { bpf } for pid=1829 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:06.073000 audit: BPF prog-id=78 op=LOAD Jul 10 00:47:06.073000 audit[1829]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024cf8 items=0 ppid=1709 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:06.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339316134663738303738353066343962383839643361393431386536 Jul 10 00:47:06.085412 env[1209]: time="2025-07-10T00:47:06.084471006Z" level=info msg="StartContainer for \"366a78cf689683af26437fef5464c5b774231dd5e9391ba87690f6193bd95783\" returns successfully" Jul 10 00:47:06.105858 env[1209]: time="2025-07-10T00:47:06.105803064Z" level=info msg="StartContainer for \"391a4f7807850f49b889d3a9418e6b2e08f4e88e0e063757dc16a8b5ccbd4bfa\" returns successfully" Jul 10 00:47:06.225359 kubelet[1610]: I0710 00:47:06.225306 1610 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:47:06.711474 kubelet[1610]: E0710 00:47:06.711392 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:47:06.711791 kubelet[1610]: E0710 00:47:06.711621 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:06.721154 kubelet[1610]: E0710 00:47:06.721095 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:47:06.721305 kubelet[1610]: E0710 00:47:06.721269 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:06.723325 kubelet[1610]: E0710 00:47:06.723297 1610 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:47:06.723421 kubelet[1610]: E0710 00:47:06.723397 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:07.101000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:07.101000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000d4a360 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:47:07.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:07.101000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:07.101000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0005012a0 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:47:07.101000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:07.463000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:07.463000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:07.463000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=43 a1=c0087484a0 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:47:07.463000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:07.464000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6721 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:07.464000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c006093650 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:47:07.464000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:07.463000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005fb2000 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:47:07.463000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:07.465000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:07.465000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c0042da240 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:47:07.465000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:07.502000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:07.502000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003846a40 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:47:07.502000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:07.502000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:07.502000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c004fa9b90 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:47:07.502000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:47:07.512035 kubelet[1610]: E0710 00:47:07.511947 1610 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 10 00:47:07.606759 kubelet[1610]: I0710 00:47:07.606707 1610 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 00:47:07.684534 kubelet[1610]: I0710 00:47:07.684460 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:07.688945 kubelet[1610]: E0710 00:47:07.688910 1610 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:07.688945 kubelet[1610]: I0710 00:47:07.688936 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:07.690483 kubelet[1610]: E0710 00:47:07.690450 1610 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:07.690483 kubelet[1610]: I0710 00:47:07.690480 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:07.691778 kubelet[1610]: E0710 00:47:07.691751 1610 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:07.724114 kubelet[1610]: I0710 00:47:07.723991 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:07.724114 kubelet[1610]: I0710 00:47:07.724096 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:07.725771 kubelet[1610]: E0710 00:47:07.725744 1610 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:07.725919 kubelet[1610]: E0710 00:47:07.725900 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:07.726239 kubelet[1610]: E0710 00:47:07.726202 1610 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:07.726351 kubelet[1610]: E0710 00:47:07.726314 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:08.066756 kubelet[1610]: I0710 00:47:08.066620 1610 apiserver.go:52] "Watching apiserver" Jul 10 00:47:08.082719 kubelet[1610]: I0710 00:47:08.082685 1610 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 00:47:09.159663 kubelet[1610]: I0710 00:47:09.159620 1610 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:09.163305 kubelet[1610]: E0710 00:47:09.163270 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:09.687506 systemd[1]: Reloading. Jul 10 00:47:09.726414 kubelet[1610]: E0710 00:47:09.726385 1610 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:09.767333 /usr/lib/systemd/system-generators/torcx-generator[1919]: time="2025-07-10T00:47:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:47:09.767365 /usr/lib/systemd/system-generators/torcx-generator[1919]: time="2025-07-10T00:47:09Z" level=info msg="torcx already run" Jul 10 00:47:09.835358 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:47:09.835391 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:47:09.859312 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:47:09.956739 kernel: kauditd_printk_skb: 405 callbacks suppressed Jul 10 00:47:09.956900 kernel: audit: type=1400 audit(1752108429.943:546): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956925 kernel: audit: type=1400 audit(1752108429.943:547): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956947 kernel: audit: type=1400 audit(1752108429.943:548): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956961 kernel: audit: type=1400 audit(1752108429.943:549): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.965806 kernel: audit: type=1400 audit(1752108429.943:550): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.965853 kernel: audit: type=1400 audit(1752108429.943:551): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.965905 kernel: audit: type=1400 audit(1752108429.943:552): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.965921 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 00:47:09.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.943000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.966631 kernel: audit: type=1400 audit(1752108429.943:553): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.966753 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 10 00:47:09.943000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.947000 audit: BPF prog-id=79 op=LOAD Jul 10 00:47:09.947000 audit: BPF prog-id=40 op=UNLOAD Jul 10 00:47:09.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.949000 audit: BPF prog-id=80 op=LOAD Jul 10 00:47:09.949000 audit: BPF prog-id=41 op=UNLOAD Jul 10 00:47:09.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.949000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.952000 audit: BPF prog-id=81 op=LOAD Jul 10 00:47:09.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.952000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.952000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit: BPF prog-id=82 op=LOAD Jul 10 00:47:09.955000 audit: BPF prog-id=42 op=UNLOAD Jul 10 00:47:09.955000 audit: BPF prog-id=43 op=UNLOAD Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.955000 audit: BPF prog-id=83 op=LOAD Jul 10 00:47:09.955000 audit: BPF prog-id=63 op=UNLOAD Jul 10 00:47:09.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.956000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.961000 audit: BPF prog-id=84 op=LOAD Jul 10 00:47:09.961000 audit: BPF prog-id=44 op=UNLOAD Jul 10 00:47:09.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.968000 audit: BPF prog-id=85 op=LOAD Jul 10 00:47:09.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.968000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit: BPF prog-id=86 op=LOAD Jul 10 00:47:09.969000 audit: BPF prog-id=45 op=UNLOAD Jul 10 00:47:09.969000 audit: BPF prog-id=46 op=UNLOAD Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.969000 audit: BPF prog-id=87 op=LOAD Jul 10 00:47:09.969000 audit: BPF prog-id=47 op=UNLOAD Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit: BPF prog-id=88 op=LOAD Jul 10 00:47:09.970000 audit: BPF prog-id=71 op=UNLOAD Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.970000 audit: BPF prog-id=89 op=LOAD Jul 10 00:47:09.970000 audit: BPF prog-id=75 op=UNLOAD Jul 10 00:47:09.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.971000 audit: BPF prog-id=90 op=LOAD Jul 10 00:47:09.971000 audit: BPF prog-id=48 op=UNLOAD Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit: BPF prog-id=91 op=LOAD Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit: BPF prog-id=92 op=LOAD Jul 10 00:47:09.973000 audit: BPF prog-id=49 op=UNLOAD Jul 10 00:47:09.973000 audit: BPF prog-id=50 op=UNLOAD Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit: BPF prog-id=93 op=LOAD Jul 10 00:47:09.974000 audit: BPF prog-id=51 op=UNLOAD Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.974000 audit: BPF prog-id=94 op=LOAD Jul 10 00:47:09.974000 audit: BPF prog-id=67 op=UNLOAD Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit: BPF prog-id=95 op=LOAD Jul 10 00:47:09.975000 audit: BPF prog-id=52 op=UNLOAD Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit: BPF prog-id=96 op=LOAD Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.975000 audit: BPF prog-id=97 op=LOAD Jul 10 00:47:09.975000 audit: BPF prog-id=53 op=UNLOAD Jul 10 00:47:09.975000 audit: BPF prog-id=54 op=UNLOAD Jul 10 00:47:09.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.976000 audit: BPF prog-id=98 op=LOAD Jul 10 00:47:09.976000 audit: BPF prog-id=59 op=UNLOAD Jul 10 00:47:09.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.978000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:09.978000 audit: BPF prog-id=99 op=LOAD Jul 10 00:47:09.978000 audit: BPF prog-id=55 op=UNLOAD Jul 10 00:47:09.990462 systemd[1]: Stopping kubelet.service... Jul 10 00:47:10.014604 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:47:10.014785 systemd[1]: Stopped kubelet.service. Jul 10 00:47:10.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:10.016418 systemd[1]: Starting kubelet.service... Jul 10 00:47:10.142306 systemd[1]: Started kubelet.service. Jul 10 00:47:10.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:10.180760 kubelet[1964]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:47:10.180760 kubelet[1964]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 00:47:10.180760 kubelet[1964]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:47:10.181196 kubelet[1964]: I0710 00:47:10.180782 1964 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:47:10.186285 kubelet[1964]: I0710 00:47:10.186246 1964 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 10 00:47:10.186285 kubelet[1964]: I0710 00:47:10.186276 1964 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:47:10.186537 kubelet[1964]: I0710 00:47:10.186513 1964 server.go:956] "Client rotation is on, will bootstrap in background" Jul 10 00:47:10.187583 kubelet[1964]: I0710 00:47:10.187564 1964 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 10 00:47:10.189669 kubelet[1964]: I0710 00:47:10.189609 1964 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:47:10.193838 kubelet[1964]: E0710 00:47:10.193805 1964 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:47:10.193959 kubelet[1964]: I0710 00:47:10.193923 1964 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:47:10.197868 kubelet[1964]: I0710 00:47:10.197827 1964 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:47:10.198064 kubelet[1964]: I0710 00:47:10.198033 1964 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:47:10.198205 kubelet[1964]: I0710 00:47:10.198055 1964 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:47:10.198205 kubelet[1964]: I0710 00:47:10.198203 1964 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:47:10.198335 kubelet[1964]: I0710 00:47:10.198210 1964 container_manager_linux.go:303] "Creating device plugin manager" Jul 10 00:47:10.198335 kubelet[1964]: I0710 00:47:10.198256 1964 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:47:10.198418 kubelet[1964]: I0710 00:47:10.198405 1964 kubelet.go:480] "Attempting to sync node with API server" Jul 10 00:47:10.198451 kubelet[1964]: I0710 00:47:10.198419 1964 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:47:10.198451 kubelet[1964]: I0710 00:47:10.198438 1964 kubelet.go:386] "Adding apiserver pod source" Jul 10 00:47:10.198451 kubelet[1964]: I0710 00:47:10.198450 1964 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:47:10.199215 kubelet[1964]: I0710 00:47:10.199197 1964 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:47:10.199588 kubelet[1964]: I0710 00:47:10.199569 1964 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 10 00:47:10.201499 kubelet[1964]: I0710 00:47:10.201482 1964 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 00:47:10.201582 kubelet[1964]: I0710 00:47:10.201515 1964 server.go:1289] "Started kubelet" Jul 10 00:47:10.201000 audit[1964]: AVC avc: denied { mac_admin } for pid=1964 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:10.201000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:10.201000 audit[1964]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ae5b00 a1=c000a210c8 a2=c000ae5ad0 a3=25 items=0 ppid=1 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:10.201000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:10.201000 audit[1964]: AVC avc: denied { mac_admin } for pid=1964 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:10.201000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:10.201000 audit[1964]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0000d7120 a1=c000a210e0 a2=c000ae5b90 a3=25 items=0 ppid=1 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:10.201000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:10.203815 kubelet[1964]: I0710 00:47:10.203296 1964 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:47:10.203815 kubelet[1964]: I0710 00:47:10.203328 1964 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 00:47:10.203815 kubelet[1964]: I0710 00:47:10.203353 1964 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:47:10.208748 kubelet[1964]: I0710 00:47:10.208638 1964 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:47:10.209501 kubelet[1964]: I0710 00:47:10.209442 1964 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:47:10.209775 kubelet[1964]: I0710 00:47:10.209735 1964 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:47:10.210491 kubelet[1964]: I0710 00:47:10.210466 1964 server.go:317] "Adding debug handlers to kubelet server" Jul 10 00:47:10.213291 kubelet[1964]: I0710 00:47:10.213272 1964 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:47:10.214558 kubelet[1964]: I0710 00:47:10.214530 1964 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 00:47:10.214825 kubelet[1964]: I0710 00:47:10.214812 1964 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 00:47:10.215081 kubelet[1964]: I0710 00:47:10.215070 1964 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:47:10.217874 kubelet[1964]: I0710 00:47:10.217859 1964 factory.go:223] Registration of the systemd container factory successfully Jul 10 00:47:10.218092 kubelet[1964]: I0710 00:47:10.218074 1964 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:47:10.220497 kubelet[1964]: E0710 00:47:10.220458 1964 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:47:10.222854 kubelet[1964]: I0710 00:47:10.222812 1964 factory.go:223] Registration of the containerd container factory successfully Jul 10 00:47:10.229310 kubelet[1964]: I0710 00:47:10.229275 1964 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 10 00:47:10.230271 kubelet[1964]: I0710 00:47:10.230221 1964 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 10 00:47:10.230418 kubelet[1964]: I0710 00:47:10.230363 1964 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 10 00:47:10.230539 kubelet[1964]: I0710 00:47:10.230520 1964 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 00:47:10.230674 kubelet[1964]: I0710 00:47:10.230633 1964 kubelet.go:2436] "Starting kubelet main sync loop" Jul 10 00:47:10.230875 kubelet[1964]: E0710 00:47:10.230855 1964 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:47:10.246899 kubelet[1964]: I0710 00:47:10.246876 1964 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 00:47:10.246899 kubelet[1964]: I0710 00:47:10.246892 1964 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 00:47:10.246978 kubelet[1964]: I0710 00:47:10.246909 1964 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:47:10.247033 kubelet[1964]: I0710 00:47:10.247017 1964 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 10 00:47:10.247064 kubelet[1964]: I0710 00:47:10.247029 1964 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 10 00:47:10.247064 kubelet[1964]: I0710 00:47:10.247045 1964 policy_none.go:49] "None policy: Start" Jul 10 00:47:10.247064 kubelet[1964]: I0710 00:47:10.247059 1964 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 00:47:10.247128 kubelet[1964]: I0710 00:47:10.247067 1964 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:47:10.247168 kubelet[1964]: I0710 00:47:10.247154 1964 state_mem.go:75] "Updated machine memory state" Jul 10 00:47:10.251229 kubelet[1964]: E0710 00:47:10.251204 1964 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 10 00:47:10.249000 audit[1964]: AVC avc: denied { mac_admin } for pid=1964 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:10.249000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:47:10.249000 audit[1964]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0006239b0 a1=c000ed4408 a2=c000623980 a3=25 items=0 ppid=1 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:10.249000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:47:10.251494 kubelet[1964]: E0710 00:47:10.251268 1964 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 10 00:47:10.251494 kubelet[1964]: I0710 00:47:10.251410 1964 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:47:10.251494 kubelet[1964]: I0710 00:47:10.251422 1964 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:47:10.251920 kubelet[1964]: I0710 00:47:10.251897 1964 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:47:10.252752 kubelet[1964]: E0710 00:47:10.252727 1964 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 00:47:10.332161 kubelet[1964]: I0710 00:47:10.332103 1964 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:10.332161 kubelet[1964]: I0710 00:47:10.332131 1964 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:10.332364 kubelet[1964]: I0710 00:47:10.332214 1964 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:10.337228 kubelet[1964]: E0710 00:47:10.337184 1964 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:10.356300 kubelet[1964]: I0710 00:47:10.356281 1964 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:47:10.362090 kubelet[1964]: I0710 00:47:10.362068 1964 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 10 00:47:10.362139 kubelet[1964]: I0710 00:47:10.362132 1964 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 00:47:10.516771 kubelet[1964]: I0710 00:47:10.516647 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:10.516771 kubelet[1964]: I0710 00:47:10.516678 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:10.516771 kubelet[1964]: I0710 00:47:10.516698 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/2c375ef08d0e79597ba6450f841e241a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"2c375ef08d0e79597ba6450f841e241a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:10.516771 kubelet[1964]: I0710 00:47:10.516713 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:10.516771 kubelet[1964]: I0710 00:47:10.516725 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:10.517135 kubelet[1964]: I0710 00:47:10.516739 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:47:10.517135 kubelet[1964]: I0710 00:47:10.516755 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:10.517135 kubelet[1964]: I0710 00:47:10.516768 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/2c375ef08d0e79597ba6450f841e241a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"2c375ef08d0e79597ba6450f841e241a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:10.517135 kubelet[1964]: I0710 00:47:10.516845 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/2c375ef08d0e79597ba6450f841e241a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"2c375ef08d0e79597ba6450f841e241a\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:10.635558 kubelet[1964]: E0710 00:47:10.635522 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:10.636595 kubelet[1964]: E0710 00:47:10.636553 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:10.637607 kubelet[1964]: E0710 00:47:10.637583 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:11.199395 kubelet[1964]: I0710 00:47:11.199344 1964 apiserver.go:52] "Watching apiserver" Jul 10 00:47:11.215657 kubelet[1964]: I0710 00:47:11.215618 1964 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 00:47:11.239072 kubelet[1964]: I0710 00:47:11.239049 1964 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:11.239157 kubelet[1964]: E0710 00:47:11.239114 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:11.239488 kubelet[1964]: I0710 00:47:11.239471 1964 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:11.339058 kubelet[1964]: E0710 00:47:11.339013 1964 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 10 00:47:11.339268 kubelet[1964]: E0710 00:47:11.339236 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:11.339929 kubelet[1964]: E0710 00:47:11.339594 1964 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 10 00:47:11.339929 kubelet[1964]: E0710 00:47:11.339703 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:11.345893 kubelet[1964]: I0710 00:47:11.345837 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.345818052 podStartE2EDuration="1.345818052s" podCreationTimestamp="2025-07-10 00:47:10 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:47:11.338634121 +0000 UTC m=+1.192526580" watchObservedRunningTime="2025-07-10 00:47:11.345818052 +0000 UTC m=+1.199710581" Jul 10 00:47:11.346010 kubelet[1964]: I0710 00:47:11.345960 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.345956131 podStartE2EDuration="1.345956131s" podCreationTimestamp="2025-07-10 00:47:10 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:47:11.345804555 +0000 UTC m=+1.199697014" watchObservedRunningTime="2025-07-10 00:47:11.345956131 +0000 UTC m=+1.199848590" Jul 10 00:47:11.355196 kubelet[1964]: I0710 00:47:11.355143 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.355124659 podStartE2EDuration="2.355124659s" podCreationTimestamp="2025-07-10 00:47:09 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:47:11.351876449 +0000 UTC m=+1.205768908" watchObservedRunningTime="2025-07-10 00:47:11.355124659 +0000 UTC m=+1.209017118" Jul 10 00:47:12.240901 kubelet[1964]: E0710 00:47:12.240865 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:12.241210 kubelet[1964]: E0710 00:47:12.241053 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:12.485837 kubelet[1964]: E0710 00:47:12.485791 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:12.809000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520971 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 00:47:12.809000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a1ac00 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:47:12.809000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:13.157000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:13.157000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:13.157000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0008a52a0 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:47:13.157000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:13.157000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009c8f40 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:47:13.157000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:13.158000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:13.158000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0008a52e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:47:13.158000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:13.158000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:47:13.158000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0003f1e20 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:47:13.158000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:47:15.257002 kubelet[1964]: I0710 00:47:15.256958 1964 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 10 00:47:15.257637 env[1209]: time="2025-07-10T00:47:15.257585082Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 10 00:47:15.258038 kubelet[1964]: I0710 00:47:15.257874 1964 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 10 00:47:15.794647 systemd[1]: Created slice kubepods-besteffort-pod2f11a097_23eb_472b_9b4e_53fb327405ec.slice. Jul 10 00:47:15.851765 kubelet[1964]: I0710 00:47:15.851728 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/2f11a097-23eb-472b-9b4e-53fb327405ec-kube-proxy\") pod \"kube-proxy-9qv25\" (UID: \"2f11a097-23eb-472b-9b4e-53fb327405ec\") " pod="kube-system/kube-proxy-9qv25" Jul 10 00:47:15.851765 kubelet[1964]: I0710 00:47:15.851761 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-t4sdk\" (UniqueName: \"kubernetes.io/projected/2f11a097-23eb-472b-9b4e-53fb327405ec-kube-api-access-t4sdk\") pod \"kube-proxy-9qv25\" (UID: \"2f11a097-23eb-472b-9b4e-53fb327405ec\") " pod="kube-system/kube-proxy-9qv25" Jul 10 00:47:15.851765 kubelet[1964]: I0710 00:47:15.851780 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2f11a097-23eb-472b-9b4e-53fb327405ec-xtables-lock\") pod \"kube-proxy-9qv25\" (UID: \"2f11a097-23eb-472b-9b4e-53fb327405ec\") " pod="kube-system/kube-proxy-9qv25" Jul 10 00:47:15.852011 kubelet[1964]: I0710 00:47:15.851795 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2f11a097-23eb-472b-9b4e-53fb327405ec-lib-modules\") pod \"kube-proxy-9qv25\" (UID: \"2f11a097-23eb-472b-9b4e-53fb327405ec\") " pod="kube-system/kube-proxy-9qv25" Jul 10 00:47:15.956455 kubelet[1964]: E0710 00:47:15.956413 1964 projected.go:289] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Jul 10 00:47:15.956455 kubelet[1964]: E0710 00:47:15.956444 1964 projected.go:194] Error preparing data for projected volume kube-api-access-t4sdk for pod kube-system/kube-proxy-9qv25: configmap "kube-root-ca.crt" not found Jul 10 00:47:15.956654 kubelet[1964]: E0710 00:47:15.956517 1964 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/2f11a097-23eb-472b-9b4e-53fb327405ec-kube-api-access-t4sdk podName:2f11a097-23eb-472b-9b4e-53fb327405ec nodeName:}" failed. No retries permitted until 2025-07-10 00:47:16.456497462 +0000 UTC m=+6.310389911 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-t4sdk" (UniqueName: "kubernetes.io/projected/2f11a097-23eb-472b-9b4e-53fb327405ec-kube-api-access-t4sdk") pod "kube-proxy-9qv25" (UID: "2f11a097-23eb-472b-9b4e-53fb327405ec") : configmap "kube-root-ca.crt" not found Jul 10 00:47:16.397041 systemd[1]: Created slice kubepods-besteffort-pod24e4a1e0_bcaf_48a7_bd80_af7313d55de2.slice. Jul 10 00:47:16.455730 kubelet[1964]: I0710 00:47:16.455698 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/24e4a1e0-bcaf-48a7-bd80-af7313d55de2-var-lib-calico\") pod \"tigera-operator-747864d56d-f94vh\" (UID: \"24e4a1e0-bcaf-48a7-bd80-af7313d55de2\") " pod="tigera-operator/tigera-operator-747864d56d-f94vh" Jul 10 00:47:16.455730 kubelet[1964]: I0710 00:47:16.455731 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pwpd9\" (UniqueName: \"kubernetes.io/projected/24e4a1e0-bcaf-48a7-bd80-af7313d55de2-kube-api-access-pwpd9\") pod \"tigera-operator-747864d56d-f94vh\" (UID: \"24e4a1e0-bcaf-48a7-bd80-af7313d55de2\") " pod="tigera-operator/tigera-operator-747864d56d-f94vh" Jul 10 00:47:16.557046 kubelet[1964]: I0710 00:47:16.557012 1964 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 10 00:47:16.699830 env[1209]: time="2025-07-10T00:47:16.699793124Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-f94vh,Uid:24e4a1e0-bcaf-48a7-bd80-af7313d55de2,Namespace:tigera-operator,Attempt:0,}" Jul 10 00:47:16.703086 kubelet[1964]: E0710 00:47:16.703058 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:16.703525 env[1209]: time="2025-07-10T00:47:16.703469515Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-9qv25,Uid:2f11a097-23eb-472b-9b4e-53fb327405ec,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:16.719877 env[1209]: time="2025-07-10T00:47:16.719811486Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:16.719963 env[1209]: time="2025-07-10T00:47:16.719885861Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:16.719963 env[1209]: time="2025-07-10T00:47:16.719908895Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:16.720140 env[1209]: time="2025-07-10T00:47:16.720078712Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d8b58fe533b6e0f35a54486fe95370f4642a0a1025d3d977eed69026c7592726 pid=2027 runtime=io.containerd.runc.v2 Jul 10 00:47:16.724872 env[1209]: time="2025-07-10T00:47:16.724804800Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:16.724872 env[1209]: time="2025-07-10T00:47:16.724835871Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:16.724872 env[1209]: time="2025-07-10T00:47:16.724864075Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:16.725103 env[1209]: time="2025-07-10T00:47:16.725049604Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cbf6f764907c7bcbf2db5ff5b3d73a581e7e9ede3145824d023033575e4e355a pid=2042 runtime=io.containerd.runc.v2 Jul 10 00:47:16.735688 systemd[1]: Started cri-containerd-d8b58fe533b6e0f35a54486fe95370f4642a0a1025d3d977eed69026c7592726.scope. Jul 10 00:47:16.737664 systemd[1]: Started cri-containerd-cbf6f764907c7bcbf2db5ff5b3d73a581e7e9ede3145824d023033575e4e355a.scope. Jul 10 00:47:16.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.754597 kernel: kauditd_printk_skb: 275 callbacks suppressed Jul 10 00:47:16.754646 kernel: audit: type=1400 audit(1752108436.753:794): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760003 kernel: audit: type=1400 audit(1752108436.753:795): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760045 kernel: audit: type=1400 audit(1752108436.753:796): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765559 kernel: audit: type=1400 audit(1752108436.753:797): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.768608 kernel: audit: type=1400 audit(1752108436.753:798): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.769561 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 00:47:16.769621 kernel: audit: type=1400 audit(1752108436.753:799): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.769643 kernel: audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 Jul 10 00:47:16.772300 kernel: audit: type=1400 audit(1752108436.753:800): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.773430 kernel: audit: backlog limit exceeded Jul 10 00:47:16.753000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.753000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.759000 audit: BPF prog-id=100 op=LOAD Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2027 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438623538666535333362366530663335613534343836666539353337 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2027 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438623538666535333362366530663335613534343836666539353337 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.760000 audit: BPF prog-id=101 op=LOAD Jul 10 00:47:16.765000 audit: BPF prog-id=102 op=LOAD Jul 10 00:47:16.760000 audit[2049]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000308ce0 items=0 ppid=2027 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438623538666535333362366530663335613534343836666539353337 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit: BPF prog-id=103 op=LOAD Jul 10 00:47:16.765000 audit[2049]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000308d28 items=0 ppid=2027 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438623538666535333362366530663335613534343836666539353337 Jul 10 00:47:16.765000 audit: BPF prog-id=103 op=UNLOAD Jul 10 00:47:16.765000 audit: BPF prog-id=101 op=UNLOAD Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2058]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2042 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.765000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit[2049]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000309138 items=0 ppid=2027 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362663666373634393037633762636266326462356666356233643733 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2042 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362663666373634393037633762636266326462356666356233643733 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438623538666535333362366530663335613534343836666539353337 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit: BPF prog-id=105 op=LOAD Jul 10 00:47:16.776000 audit[2058]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000211050 items=0 ppid=2042 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362663666373634393037633762636266326462356666356233643733 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit: BPF prog-id=106 op=LOAD Jul 10 00:47:16.776000 audit[2058]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000211098 items=0 ppid=2042 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362663666373634393037633762636266326462356666356233643733 Jul 10 00:47:16.776000 audit: BPF prog-id=106 op=UNLOAD Jul 10 00:47:16.776000 audit: BPF prog-id=105 op=UNLOAD Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { perfmon } for pid=2058 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit[2058]: AVC avc: denied { bpf } for pid=2058 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.776000 audit: BPF prog-id=107 op=LOAD Jul 10 00:47:16.776000 audit[2058]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0002114a8 items=0 ppid=2042 pid=2058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362663666373634393037633762636266326462356666356233643733 Jul 10 00:47:16.789578 env[1209]: time="2025-07-10T00:47:16.789538813Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-9qv25,Uid:2f11a097-23eb-472b-9b4e-53fb327405ec,Namespace:kube-system,Attempt:0,} returns sandbox id \"cbf6f764907c7bcbf2db5ff5b3d73a581e7e9ede3145824d023033575e4e355a\"" Jul 10 00:47:16.790144 kubelet[1964]: E0710 00:47:16.790110 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:16.798297 env[1209]: time="2025-07-10T00:47:16.798255078Z" level=info msg="CreateContainer within sandbox \"cbf6f764907c7bcbf2db5ff5b3d73a581e7e9ede3145824d023033575e4e355a\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 10 00:47:16.802668 env[1209]: time="2025-07-10T00:47:16.802634816Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-f94vh,Uid:24e4a1e0-bcaf-48a7-bd80-af7313d55de2,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"d8b58fe533b6e0f35a54486fe95370f4642a0a1025d3d977eed69026c7592726\"" Jul 10 00:47:16.806023 env[1209]: time="2025-07-10T00:47:16.805999355Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 10 00:47:16.817247 env[1209]: time="2025-07-10T00:47:16.817206649Z" level=info msg="CreateContainer within sandbox \"cbf6f764907c7bcbf2db5ff5b3d73a581e7e9ede3145824d023033575e4e355a\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"599c1ca49020bf4878696d2a22d25f41aa5e2224786775dca1e16a009328b7fd\"" Jul 10 00:47:16.817750 env[1209]: time="2025-07-10T00:47:16.817729429Z" level=info msg="StartContainer for \"599c1ca49020bf4878696d2a22d25f41aa5e2224786775dca1e16a009328b7fd\"" Jul 10 00:47:16.833815 systemd[1]: Started cri-containerd-599c1ca49020bf4878696d2a22d25f41aa5e2224786775dca1e16a009328b7fd.scope. Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001996b0 a2=3c a3=7fb42eb0a688 items=0 ppid=2042 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539396331636134393032306266343837383639366432613232643235 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit: BPF prog-id=108 op=LOAD Jul 10 00:47:16.846000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001999d8 a2=78 a3=c000313f18 items=0 ppid=2042 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539396331636134393032306266343837383639366432613232643235 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit: BPF prog-id=109 op=LOAD Jul 10 00:47:16.846000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000199770 a2=78 a3=c000313f68 items=0 ppid=2042 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539396331636134393032306266343837383639366432613232643235 Jul 10 00:47:16.846000 audit: BPF prog-id=109 op=UNLOAD Jul 10 00:47:16.846000 audit: BPF prog-id=108 op=UNLOAD Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { perfmon } for pid=2107 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit[2107]: AVC avc: denied { bpf } for pid=2107 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:16.846000 audit: BPF prog-id=110 op=LOAD Jul 10 00:47:16.846000 audit[2107]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000199c30 a2=78 a3=c000313ff8 items=0 ppid=2042 pid=2107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539396331636134393032306266343837383639366432613232643235 Jul 10 00:47:16.858677 env[1209]: time="2025-07-10T00:47:16.858638779Z" level=info msg="StartContainer for \"599c1ca49020bf4878696d2a22d25f41aa5e2224786775dca1e16a009328b7fd\" returns successfully" Jul 10 00:47:16.951000 audit[2169]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:16.951000 audit[2169]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeddeb1d60 a2=0 a3=7ffeddeb1d4c items=0 ppid=2118 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.951000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:47:16.952000 audit[2173]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:16.952000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd10ed6cf0 a2=0 a3=7ffd10ed6cdc items=0 ppid=2118 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.952000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:47:16.954000 audit[2170]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:16.954000 audit[2170]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd4d5e6ce0 a2=0 a3=7ffd4d5e6ccc items=0 ppid=2118 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.954000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:47:16.956000 audit[2176]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:16.956000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffaa449050 a2=0 a3=7fffaa44903c items=0 ppid=2118 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.956000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:47:16.958000 audit[2178]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2178 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:16.958000 audit[2178]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff9407aae0 a2=0 a3=7fff9407aacc items=0 ppid=2118 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.958000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:47:16.958000 audit[2179]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:16.958000 audit[2179]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffb4e10fd0 a2=0 a3=7fffb4e10fbc items=0 ppid=2118 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:16.958000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:47:17.053000 audit[2180]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.053000 audit[2180]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd3c4a4f00 a2=0 a3=7ffd3c4a4eec items=0 ppid=2118 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.053000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:47:17.055000 audit[2182]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.055000 audit[2182]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe17c24530 a2=0 a3=7ffe17c2451c items=0 ppid=2118 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.055000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 10 00:47:17.059000 audit[2185]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.059000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd0dc74200 a2=0 a3=7ffd0dc741ec items=0 ppid=2118 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.059000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 10 00:47:17.060000 audit[2186]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.060000 audit[2186]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffffea027b0 a2=0 a3=7ffffea0279c items=0 ppid=2118 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.060000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:47:17.062000 audit[2188]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.062000 audit[2188]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff82548d90 a2=0 a3=7fff82548d7c items=0 ppid=2118 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.062000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:47:17.063000 audit[2189]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.063000 audit[2189]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd64768f00 a2=0 a3=7ffd64768eec items=0 ppid=2118 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.063000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:47:17.065000 audit[2191]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.065000 audit[2191]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd7b795410 a2=0 a3=7ffd7b7953fc items=0 ppid=2118 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.065000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:47:17.068000 audit[2194]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.068000 audit[2194]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffca62cfc90 a2=0 a3=7ffca62cfc7c items=0 ppid=2118 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.068000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 10 00:47:17.069000 audit[2195]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.069000 audit[2195]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd90854640 a2=0 a3=7ffd9085462c items=0 ppid=2118 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.069000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:47:17.071000 audit[2197]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.071000 audit[2197]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe2c4309c0 a2=0 a3=7ffe2c4309ac items=0 ppid=2118 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.071000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:47:17.072000 audit[2198]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.072000 audit[2198]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffec20d11f0 a2=0 a3=7ffec20d11dc items=0 ppid=2118 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.072000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:47:17.074000 audit[2200]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.074000 audit[2200]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff0bb423f0 a2=0 a3=7fff0bb423dc items=0 ppid=2118 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.074000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:47:17.077000 audit[2203]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2203 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.077000 audit[2203]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe5e558f60 a2=0 a3=7ffe5e558f4c items=0 ppid=2118 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.077000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:47:17.080000 audit[2206]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.080000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc32057940 a2=0 a3=7ffc3205792c items=0 ppid=2118 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.080000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:47:17.081000 audit[2207]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.081000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd519de9b0 a2=0 a3=7ffd519de99c items=0 ppid=2118 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.081000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:47:17.083000 audit[2209]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.083000 audit[2209]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd7b985d00 a2=0 a3=7ffd7b985cec items=0 ppid=2118 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.083000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:47:17.086000 audit[2212]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.086000 audit[2212]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdba218560 a2=0 a3=7ffdba21854c items=0 ppid=2118 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.086000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:47:17.087000 audit[2213]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.087000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff078cd90 a2=0 a3=7ffff078cd7c items=0 ppid=2118 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.087000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:47:17.090000 audit[2215]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:47:17.090000 audit[2215]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe01111a00 a2=0 a3=7ffe011119ec items=0 ppid=2118 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.090000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:47:17.110000 audit[2221]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:17.110000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffa78b7f50 a2=0 a3=7fffa78b7f3c items=0 ppid=2118 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.110000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:17.118000 audit[2221]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:17.118000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fffa78b7f50 a2=0 a3=7fffa78b7f3c items=0 ppid=2118 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.118000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:17.119000 audit[2226]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.119000 audit[2226]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd76561a10 a2=0 a3=7ffd765619fc items=0 ppid=2118 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.119000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:47:17.121000 audit[2228]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.121000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffebcecb6c0 a2=0 a3=7ffebcecb6ac items=0 ppid=2118 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.121000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 10 00:47:17.125000 audit[2231]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.125000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fffa42849a0 a2=0 a3=7fffa428498c items=0 ppid=2118 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.125000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 10 00:47:17.125000 audit[2232]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.125000 audit[2232]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcb14b7250 a2=0 a3=7ffcb14b723c items=0 ppid=2118 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.125000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:47:17.127000 audit[2234]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.127000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdd44ab2d0 a2=0 a3=7ffdd44ab2bc items=0 ppid=2118 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.127000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:47:17.128000 audit[2235]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.128000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe5458b0d0 a2=0 a3=7ffe5458b0bc items=0 ppid=2118 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.128000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:47:17.130000 audit[2237]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.130000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffd32823d0 a2=0 a3=7fffd32823bc items=0 ppid=2118 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.130000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 10 00:47:17.133000 audit[2240]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.133000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffed88db450 a2=0 a3=7ffed88db43c items=0 ppid=2118 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.133000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:47:17.134000 audit[2241]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.134000 audit[2241]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff609569a0 a2=0 a3=7fff6095698c items=0 ppid=2118 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.134000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:47:17.136000 audit[2243]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.136000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffee3fe3960 a2=0 a3=7ffee3fe394c items=0 ppid=2118 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.136000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:47:17.137000 audit[2244]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.137000 audit[2244]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffddb0ac7b0 a2=0 a3=7ffddb0ac79c items=0 ppid=2118 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.137000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:47:17.139000 audit[2246]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.139000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd12475d10 a2=0 a3=7ffd12475cfc items=0 ppid=2118 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.139000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:47:17.142000 audit[2249]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.142000 audit[2249]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcf5aace40 a2=0 a3=7ffcf5aace2c items=0 ppid=2118 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.142000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:47:17.145000 audit[2252]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.145000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdd2b7ee80 a2=0 a3=7ffdd2b7ee6c items=0 ppid=2118 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.145000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 10 00:47:17.146000 audit[2253]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2253 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.146000 audit[2253]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fffe8efdc00 a2=0 a3=7fffe8efdbec items=0 ppid=2118 pid=2253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.146000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:47:17.148000 audit[2255]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.148000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff977c3fe0 a2=0 a3=7fff977c3fcc items=0 ppid=2118 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.148000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:47:17.150000 audit[2258]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.150000 audit[2258]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffde9793160 a2=0 a3=7ffde979314c items=0 ppid=2118 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.150000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:47:17.151000 audit[2259]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2259 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.151000 audit[2259]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeff5aa770 a2=0 a3=7ffeff5aa75c items=0 ppid=2118 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.151000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:47:17.153000 audit[2261]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2261 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.153000 audit[2261]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc253253f0 a2=0 a3=7ffc253253dc items=0 ppid=2118 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:47:17.154000 audit[2262]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.154000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc917931e0 a2=0 a3=7ffc917931cc items=0 ppid=2118 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.154000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:47:17.156000 audit[2264]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2264 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.156000 audit[2264]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd754f8e00 a2=0 a3=7ffd754f8dec items=0 ppid=2118 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.156000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:47:17.159000 audit[2267]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:47:17.159000 audit[2267]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd3c6b3120 a2=0 a3=7ffd3c6b310c items=0 ppid=2118 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.159000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:47:17.162000 audit[2269]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:47:17.162000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffee5f11160 a2=0 a3=7ffee5f1114c items=0 ppid=2118 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.162000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:17.162000 audit[2269]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2269 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:47:17.162000 audit[2269]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffee5f11160 a2=0 a3=7ffee5f1114c items=0 ppid=2118 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:17.162000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:17.250495 kubelet[1964]: E0710 00:47:17.250319 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:17.258295 kubelet[1964]: I0710 00:47:17.258244 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-9qv25" podStartSLOduration=2.258228568 podStartE2EDuration="2.258228568s" podCreationTimestamp="2025-07-10 00:47:15 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:47:17.258218729 +0000 UTC m=+7.112111188" watchObservedRunningTime="2025-07-10 00:47:17.258228568 +0000 UTC m=+7.112121028" Jul 10 00:47:17.891280 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1707046938.mount: Deactivated successfully. Jul 10 00:47:18.553825 kubelet[1964]: E0710 00:47:18.553786 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:18.710692 env[1209]: time="2025-07-10T00:47:18.710636114Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.712603 env[1209]: time="2025-07-10T00:47:18.712559598Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.713990 env[1209]: time="2025-07-10T00:47:18.713959093Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.715555 env[1209]: time="2025-07-10T00:47:18.715512074Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:18.715943 env[1209]: time="2025-07-10T00:47:18.715914108Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 10 00:47:18.720153 env[1209]: time="2025-07-10T00:47:18.720094488Z" level=info msg="CreateContainer within sandbox \"d8b58fe533b6e0f35a54486fe95370f4642a0a1025d3d977eed69026c7592726\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 10 00:47:18.732013 env[1209]: time="2025-07-10T00:47:18.731962734Z" level=info msg="CreateContainer within sandbox \"d8b58fe533b6e0f35a54486fe95370f4642a0a1025d3d977eed69026c7592726\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"fc8eec6f2cbf21c2b918cc58d5566496cf14cdb520e46dcf50adb4ac60fa9f4b\"" Jul 10 00:47:18.732410 env[1209]: time="2025-07-10T00:47:18.732362223Z" level=info msg="StartContainer for \"fc8eec6f2cbf21c2b918cc58d5566496cf14cdb520e46dcf50adb4ac60fa9f4b\"" Jul 10 00:47:18.746341 systemd[1]: run-containerd-runc-k8s.io-fc8eec6f2cbf21c2b918cc58d5566496cf14cdb520e46dcf50adb4ac60fa9f4b-runc.KQg4oJ.mount: Deactivated successfully. Jul 10 00:47:18.748625 systemd[1]: Started cri-containerd-fc8eec6f2cbf21c2b918cc58d5566496cf14cdb520e46dcf50adb4ac60fa9f4b.scope. Jul 10 00:47:18.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit: BPF prog-id=111 op=LOAD Jul 10 00:47:18.758000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2027 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663386565633666326362663231633262393138636335386435353636 Jul 10 00:47:18.758000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.758000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2027 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663386565633666326362663231633262393138636335386435353636 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit: BPF prog-id=112 op=LOAD Jul 10 00:47:18.759000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00037c230 items=0 ppid=2027 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663386565633666326362663231633262393138636335386435353636 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit: BPF prog-id=113 op=LOAD Jul 10 00:47:18.759000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00037c278 items=0 ppid=2027 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663386565633666326362663231633262393138636335386435353636 Jul 10 00:47:18.759000 audit: BPF prog-id=113 op=UNLOAD Jul 10 00:47:18.759000 audit: BPF prog-id=112 op=UNLOAD Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { perfmon } for pid=2277 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit[2277]: AVC avc: denied { bpf } for pid=2277 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:18.759000 audit: BPF prog-id=114 op=LOAD Jul 10 00:47:18.759000 audit[2277]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00037c688 items=0 ppid=2027 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:18.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663386565633666326362663231633262393138636335386435353636 Jul 10 00:47:18.898056 env[1209]: time="2025-07-10T00:47:18.897945164Z" level=info msg="StartContainer for \"fc8eec6f2cbf21c2b918cc58d5566496cf14cdb520e46dcf50adb4ac60fa9f4b\" returns successfully" Jul 10 00:47:19.254535 kubelet[1964]: E0710 00:47:19.254505 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:19.268129 kubelet[1964]: I0710 00:47:19.268064 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-f94vh" podStartSLOduration=1.3557394249999999 podStartE2EDuration="3.268044983s" podCreationTimestamp="2025-07-10 00:47:16 +0000 UTC" firstStartedPulling="2025-07-10 00:47:16.804414934 +0000 UTC m=+6.658307393" lastFinishedPulling="2025-07-10 00:47:18.716720491 +0000 UTC m=+8.570612951" observedRunningTime="2025-07-10 00:47:19.267953257 +0000 UTC m=+9.121845706" watchObservedRunningTime="2025-07-10 00:47:19.268044983 +0000 UTC m=+9.121937442" Jul 10 00:47:19.725055 kubelet[1964]: E0710 00:47:19.725023 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:20.255523 kubelet[1964]: E0710 00:47:20.255476 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:21.256978 kubelet[1964]: E0710 00:47:21.256944 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:22.044177 update_engine[1201]: I0710 00:47:22.044121 1201 update_attempter.cc:509] Updating boot flags... Jul 10 00:47:22.491015 kubelet[1964]: E0710 00:47:22.490979 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:23.892134 sudo[1347]: pam_unix(sudo:session): session closed for user root Jul 10 00:47:23.890000 audit[1347]: USER_END pid=1347 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:47:23.893185 kernel: kauditd_printk_skb: 359 callbacks suppressed Jul 10 00:47:23.893228 kernel: audit: type=1106 audit(1752108443.890:905): pid=1347 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:47:23.890000 audit[1347]: CRED_DISP pid=1347 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:47:23.899702 kernel: audit: type=1104 audit(1752108443.890:906): pid=1347 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:47:23.900231 sshd[1344]: pam_unix(sshd:session): session closed for user core Jul 10 00:47:23.902000 audit[1344]: USER_END pid=1344 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:23.905193 systemd[1]: sshd@6-10.0.0.138:22-10.0.0.1:44734.service: Deactivated successfully. Jul 10 00:47:23.906233 systemd[1]: session-7.scope: Deactivated successfully. Jul 10 00:47:23.906349 systemd[1]: session-7.scope: Consumed 5.097s CPU time. Jul 10 00:47:23.908270 systemd-logind[1196]: Session 7 logged out. Waiting for processes to exit. Jul 10 00:47:23.909565 kernel: audit: type=1106 audit(1752108443.902:907): pid=1344 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:23.909333 systemd-logind[1196]: Removed session 7. Jul 10 00:47:23.902000 audit[1344]: CRED_DISP pid=1344 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:23.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.138:22-10.0.0.1:44734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:23.917421 kernel: audit: type=1104 audit(1752108443.902:908): pid=1344 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:23.917571 kernel: audit: type=1131 audit(1752108443.904:909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.138:22-10.0.0.1:44734 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:24.207423 kernel: audit: type=1325 audit(1752108444.199:910): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:24.207581 kernel: audit: type=1300 audit(1752108444.199:910): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd42bb19d0 a2=0 a3=7ffd42bb19bc items=0 ppid=2118 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:24.199000 audit[2378]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:24.199000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd42bb19d0 a2=0 a3=7ffd42bb19bc items=0 ppid=2118 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:24.209862 kernel: audit: type=1327 audit(1752108444.199:910): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:24.199000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:24.209000 audit[2378]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:24.213404 kernel: audit: type=1325 audit(1752108444.209:911): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:24.209000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd42bb19d0 a2=0 a3=0 items=0 ppid=2118 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:24.219398 kernel: audit: type=1300 audit(1752108444.209:911): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd42bb19d0 a2=0 a3=0 items=0 ppid=2118 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:24.209000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:24.236000 audit[2380]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:24.236000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe66fd6d10 a2=0 a3=7ffe66fd6cfc items=0 ppid=2118 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:24.236000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:24.240000 audit[2380]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:24.240000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe66fd6d10 a2=0 a3=0 items=0 ppid=2118 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:24.240000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:25.942000 audit[2382]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:25.942000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffb0c31260 a2=0 a3=7fffb0c3124c items=0 ppid=2118 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:25.942000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:25.947000 audit[2382]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2382 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:25.947000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffb0c31260 a2=0 a3=0 items=0 ppid=2118 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:25.947000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:26.065236 systemd[1]: Created slice kubepods-besteffort-pod384666b5_8ddc_4e89_a3bb_7ef6c7a5365f.slice. Jul 10 00:47:26.119601 kubelet[1964]: I0710 00:47:26.119538 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sgtr5\" (UniqueName: \"kubernetes.io/projected/384666b5-8ddc-4e89-a3bb-7ef6c7a5365f-kube-api-access-sgtr5\") pod \"calico-typha-758c84dd98-x5b7j\" (UID: \"384666b5-8ddc-4e89-a3bb-7ef6c7a5365f\") " pod="calico-system/calico-typha-758c84dd98-x5b7j" Jul 10 00:47:26.119601 kubelet[1964]: I0710 00:47:26.119584 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/384666b5-8ddc-4e89-a3bb-7ef6c7a5365f-tigera-ca-bundle\") pod \"calico-typha-758c84dd98-x5b7j\" (UID: \"384666b5-8ddc-4e89-a3bb-7ef6c7a5365f\") " pod="calico-system/calico-typha-758c84dd98-x5b7j" Jul 10 00:47:26.119601 kubelet[1964]: I0710 00:47:26.119604 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/384666b5-8ddc-4e89-a3bb-7ef6c7a5365f-typha-certs\") pod \"calico-typha-758c84dd98-x5b7j\" (UID: \"384666b5-8ddc-4e89-a3bb-7ef6c7a5365f\") " pod="calico-system/calico-typha-758c84dd98-x5b7j" Jul 10 00:47:26.300000 audit[2386]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2386 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:26.300000 audit[2386]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffca91591f0 a2=0 a3=7ffca91591dc items=0 ppid=2118 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.300000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:26.305000 audit[2386]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2386 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:26.305000 audit[2386]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffca91591f0 a2=0 a3=0 items=0 ppid=2118 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.305000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:26.361746 systemd[1]: Created slice kubepods-besteffort-pod92fa4b77_4c8c_41ac_b32f_6a6ad34e4231.slice. Jul 10 00:47:26.374220 kubelet[1964]: E0710 00:47:26.374179 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:26.374776 env[1209]: time="2025-07-10T00:47:26.374734248Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-758c84dd98-x5b7j,Uid:384666b5-8ddc-4e89-a3bb-7ef6c7a5365f,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:26.392334 env[1209]: time="2025-07-10T00:47:26.392265471Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:26.392334 env[1209]: time="2025-07-10T00:47:26.392302973Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:26.392334 env[1209]: time="2025-07-10T00:47:26.392314946Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:26.392581 env[1209]: time="2025-07-10T00:47:26.392522602Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8e1a21dad35cb6606f1f4d504502a5d88eaa4ce9689514a6cfc5ba30d8963499 pid=2394 runtime=io.containerd.runc.v2 Jul 10 00:47:26.406898 systemd[1]: Started cri-containerd-8e1a21dad35cb6606f1f4d504502a5d88eaa4ce9689514a6cfc5ba30d8963499.scope. Jul 10 00:47:26.416000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit: BPF prog-id=115 op=LOAD Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2394 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865316132316461643335636236363036663166346435303435303261 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2394 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865316132316461643335636236363036663166346435303435303261 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.417000 audit: BPF prog-id=116 op=LOAD Jul 10 00:47:26.417000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030a890 items=0 ppid=2394 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.417000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865316132316461643335636236363036663166346435303435303261 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit: BPF prog-id=117 op=LOAD Jul 10 00:47:26.418000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030a8d8 items=0 ppid=2394 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865316132316461643335636236363036663166346435303435303261 Jul 10 00:47:26.418000 audit: BPF prog-id=117 op=UNLOAD Jul 10 00:47:26.418000 audit: BPF prog-id=116 op=UNLOAD Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.418000 audit: BPF prog-id=118 op=LOAD Jul 10 00:47:26.418000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030ace8 items=0 ppid=2394 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.418000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865316132316461643335636236363036663166346435303435303261 Jul 10 00:47:26.421487 kubelet[1964]: I0710 00:47:26.421453 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-flexvol-driver-host\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421552 kubelet[1964]: I0710 00:47:26.421487 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-lib-modules\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421552 kubelet[1964]: I0710 00:47:26.421509 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n4rrn\" (UniqueName: \"kubernetes.io/projected/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-kube-api-access-n4rrn\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421552 kubelet[1964]: I0710 00:47:26.421525 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-cni-net-dir\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421552 kubelet[1964]: I0710 00:47:26.421551 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-node-certs\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421650 kubelet[1964]: I0710 00:47:26.421567 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-var-lib-calico\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421650 kubelet[1964]: I0710 00:47:26.421588 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-cni-bin-dir\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421650 kubelet[1964]: I0710 00:47:26.421613 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-policysync\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421650 kubelet[1964]: I0710 00:47:26.421626 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-tigera-ca-bundle\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421650 kubelet[1964]: I0710 00:47:26.421640 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-var-run-calico\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421760 kubelet[1964]: I0710 00:47:26.421708 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-cni-log-dir\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.421760 kubelet[1964]: I0710 00:47:26.421741 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/92fa4b77-4c8c-41ac-b32f-6a6ad34e4231-xtables-lock\") pod \"calico-node-h2t4d\" (UID: \"92fa4b77-4c8c-41ac-b32f-6a6ad34e4231\") " pod="calico-system/calico-node-h2t4d" Jul 10 00:47:26.443557 env[1209]: time="2025-07-10T00:47:26.443119721Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-758c84dd98-x5b7j,Uid:384666b5-8ddc-4e89-a3bb-7ef6c7a5365f,Namespace:calico-system,Attempt:0,} returns sandbox id \"8e1a21dad35cb6606f1f4d504502a5d88eaa4ce9689514a6cfc5ba30d8963499\"" Jul 10 00:47:26.443823 kubelet[1964]: E0710 00:47:26.443796 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:26.444772 env[1209]: time="2025-07-10T00:47:26.444752298Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 10 00:47:26.524666 kubelet[1964]: E0710 00:47:26.524630 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.524666 kubelet[1964]: W0710 00:47:26.524652 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.524853 kubelet[1964]: E0710 00:47:26.524680 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.526363 kubelet[1964]: E0710 00:47:26.526343 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.526363 kubelet[1964]: W0710 00:47:26.526357 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.526363 kubelet[1964]: E0710 00:47:26.526366 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.529725 kubelet[1964]: E0710 00:47:26.529701 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.529725 kubelet[1964]: W0710 00:47:26.529722 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.529827 kubelet[1964]: E0710 00:47:26.529742 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.602405 kubelet[1964]: E0710 00:47:26.602264 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dwxds" podUID="5b03f62d-564c-468f-af64-90b8cb619060" Jul 10 00:47:26.619693 kubelet[1964]: E0710 00:47:26.619669 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.619693 kubelet[1964]: W0710 00:47:26.619686 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.619781 kubelet[1964]: E0710 00:47:26.619704 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.619939 kubelet[1964]: E0710 00:47:26.619924 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.619939 kubelet[1964]: W0710 00:47:26.619933 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.619939 kubelet[1964]: E0710 00:47:26.619940 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.620187 kubelet[1964]: E0710 00:47:26.620161 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.620233 kubelet[1964]: W0710 00:47:26.620187 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.620233 kubelet[1964]: E0710 00:47:26.620211 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.620470 kubelet[1964]: E0710 00:47:26.620457 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.620470 kubelet[1964]: W0710 00:47:26.620467 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.620522 kubelet[1964]: E0710 00:47:26.620474 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.620660 kubelet[1964]: E0710 00:47:26.620648 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.620660 kubelet[1964]: W0710 00:47:26.620657 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.620711 kubelet[1964]: E0710 00:47:26.620665 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.620820 kubelet[1964]: E0710 00:47:26.620805 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.620820 kubelet[1964]: W0710 00:47:26.620813 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.620820 kubelet[1964]: E0710 00:47:26.620820 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.620967 kubelet[1964]: E0710 00:47:26.620953 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.620967 kubelet[1964]: W0710 00:47:26.620962 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.621021 kubelet[1964]: E0710 00:47:26.620969 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.621130 kubelet[1964]: E0710 00:47:26.621115 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.621130 kubelet[1964]: W0710 00:47:26.621124 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.621130 kubelet[1964]: E0710 00:47:26.621130 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.621292 kubelet[1964]: E0710 00:47:26.621276 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.621292 kubelet[1964]: W0710 00:47:26.621285 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.621292 kubelet[1964]: E0710 00:47:26.621291 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.621469 kubelet[1964]: E0710 00:47:26.621452 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.621513 kubelet[1964]: W0710 00:47:26.621474 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.621513 kubelet[1964]: E0710 00:47:26.621484 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.621672 kubelet[1964]: E0710 00:47:26.621656 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.621672 kubelet[1964]: W0710 00:47:26.621666 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.621672 kubelet[1964]: E0710 00:47:26.621673 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.621823 kubelet[1964]: E0710 00:47:26.621806 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.621823 kubelet[1964]: W0710 00:47:26.621815 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.621823 kubelet[1964]: E0710 00:47:26.621822 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.621997 kubelet[1964]: E0710 00:47:26.621980 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.622043 kubelet[1964]: W0710 00:47:26.621991 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.622043 kubelet[1964]: E0710 00:47:26.622013 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.622186 kubelet[1964]: E0710 00:47:26.622170 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.622186 kubelet[1964]: W0710 00:47:26.622179 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.622186 kubelet[1964]: E0710 00:47:26.622185 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.622356 kubelet[1964]: E0710 00:47:26.622342 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.622356 kubelet[1964]: W0710 00:47:26.622351 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.622415 kubelet[1964]: E0710 00:47:26.622358 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.622591 kubelet[1964]: E0710 00:47:26.622577 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.622591 kubelet[1964]: W0710 00:47:26.622589 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.622671 kubelet[1964]: E0710 00:47:26.622596 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.622809 kubelet[1964]: E0710 00:47:26.622790 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.622809 kubelet[1964]: W0710 00:47:26.622802 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.622809 kubelet[1964]: E0710 00:47:26.622811 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.623070 kubelet[1964]: E0710 00:47:26.623030 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.623070 kubelet[1964]: W0710 00:47:26.623057 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.623252 kubelet[1964]: E0710 00:47:26.623083 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.623323 kubelet[1964]: E0710 00:47:26.623309 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.623323 kubelet[1964]: W0710 00:47:26.623319 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.623395 kubelet[1964]: E0710 00:47:26.623327 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.623513 kubelet[1964]: E0710 00:47:26.623501 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.623513 kubelet[1964]: W0710 00:47:26.623510 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.623569 kubelet[1964]: E0710 00:47:26.623518 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.623773 kubelet[1964]: E0710 00:47:26.623760 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.623773 kubelet[1964]: W0710 00:47:26.623772 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.623825 kubelet[1964]: E0710 00:47:26.623779 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.623825 kubelet[1964]: I0710 00:47:26.623803 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/5b03f62d-564c-468f-af64-90b8cb619060-socket-dir\") pod \"csi-node-driver-dwxds\" (UID: \"5b03f62d-564c-468f-af64-90b8cb619060\") " pod="calico-system/csi-node-driver-dwxds" Jul 10 00:47:26.624029 kubelet[1964]: E0710 00:47:26.624015 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.624029 kubelet[1964]: W0710 00:47:26.624026 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.624074 kubelet[1964]: E0710 00:47:26.624033 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.624074 kubelet[1964]: I0710 00:47:26.624051 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/5b03f62d-564c-468f-af64-90b8cb619060-registration-dir\") pod \"csi-node-driver-dwxds\" (UID: \"5b03f62d-564c-468f-af64-90b8cb619060\") " pod="calico-system/csi-node-driver-dwxds" Jul 10 00:47:26.624247 kubelet[1964]: E0710 00:47:26.624231 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.624247 kubelet[1964]: W0710 00:47:26.624245 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.624299 kubelet[1964]: E0710 00:47:26.624254 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.624416 kubelet[1964]: E0710 00:47:26.624404 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.624416 kubelet[1964]: W0710 00:47:26.624414 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.624478 kubelet[1964]: E0710 00:47:26.624421 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.624595 kubelet[1964]: E0710 00:47:26.624583 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.624595 kubelet[1964]: W0710 00:47:26.624592 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.624643 kubelet[1964]: E0710 00:47:26.624599 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.624643 kubelet[1964]: I0710 00:47:26.624620 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/5b03f62d-564c-468f-af64-90b8cb619060-kubelet-dir\") pod \"csi-node-driver-dwxds\" (UID: \"5b03f62d-564c-468f-af64-90b8cb619060\") " pod="calico-system/csi-node-driver-dwxds" Jul 10 00:47:26.624893 kubelet[1964]: E0710 00:47:26.624862 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.624893 kubelet[1964]: W0710 00:47:26.624887 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.624941 kubelet[1964]: E0710 00:47:26.624907 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.625089 kubelet[1964]: E0710 00:47:26.625072 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.625089 kubelet[1964]: W0710 00:47:26.625082 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.625089 kubelet[1964]: E0710 00:47:26.625089 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.625280 kubelet[1964]: E0710 00:47:26.625265 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.625280 kubelet[1964]: W0710 00:47:26.625274 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.625280 kubelet[1964]: E0710 00:47:26.625281 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.625351 kubelet[1964]: I0710 00:47:26.625308 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/5b03f62d-564c-468f-af64-90b8cb619060-varrun\") pod \"csi-node-driver-dwxds\" (UID: \"5b03f62d-564c-468f-af64-90b8cb619060\") " pod="calico-system/csi-node-driver-dwxds" Jul 10 00:47:26.625507 kubelet[1964]: E0710 00:47:26.625488 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.625546 kubelet[1964]: W0710 00:47:26.625506 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.625546 kubelet[1964]: E0710 00:47:26.625516 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.625591 kubelet[1964]: I0710 00:47:26.625545 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-64tfx\" (UniqueName: \"kubernetes.io/projected/5b03f62d-564c-468f-af64-90b8cb619060-kube-api-access-64tfx\") pod \"csi-node-driver-dwxds\" (UID: \"5b03f62d-564c-468f-af64-90b8cb619060\") " pod="calico-system/csi-node-driver-dwxds" Jul 10 00:47:26.625722 kubelet[1964]: E0710 00:47:26.625707 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.625749 kubelet[1964]: W0710 00:47:26.625724 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.625749 kubelet[1964]: E0710 00:47:26.625733 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.625885 kubelet[1964]: E0710 00:47:26.625873 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.625885 kubelet[1964]: W0710 00:47:26.625882 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.625933 kubelet[1964]: E0710 00:47:26.625889 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.626048 kubelet[1964]: E0710 00:47:26.626036 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.626048 kubelet[1964]: W0710 00:47:26.626045 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.626100 kubelet[1964]: E0710 00:47:26.626052 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.626198 kubelet[1964]: E0710 00:47:26.626186 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.626198 kubelet[1964]: W0710 00:47:26.626195 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.626243 kubelet[1964]: E0710 00:47:26.626202 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.626363 kubelet[1964]: E0710 00:47:26.626351 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.626363 kubelet[1964]: W0710 00:47:26.626360 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.626456 kubelet[1964]: E0710 00:47:26.626367 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.626555 kubelet[1964]: E0710 00:47:26.626542 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.626555 kubelet[1964]: W0710 00:47:26.626552 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.626606 kubelet[1964]: E0710 00:47:26.626560 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.665144 env[1209]: time="2025-07-10T00:47:26.665104031Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-h2t4d,Uid:92fa4b77-4c8c-41ac-b32f-6a6ad34e4231,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:26.681892 env[1209]: time="2025-07-10T00:47:26.681604767Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:26.681892 env[1209]: time="2025-07-10T00:47:26.681677656Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:26.681892 env[1209]: time="2025-07-10T00:47:26.681700580Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:26.682064 env[1209]: time="2025-07-10T00:47:26.681932193Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e3ec43a56db9f72d540528fafbb92f90b675adcdb7e0ff1528e350777f5d8d17 pid=2473 runtime=io.containerd.runc.v2 Jul 10 00:47:26.694619 systemd[1]: Started cri-containerd-e3ec43a56db9f72d540528fafbb92f90b675adcdb7e0ff1528e350777f5d8d17.scope. Jul 10 00:47:26.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.704000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.704000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.704000 audit: BPF prog-id=119 op=LOAD Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2473 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656334336135366462396637326435343035323866616662623932 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=2473 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656334336135366462396637326435343035323866616662623932 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit: BPF prog-id=120 op=LOAD Jul 10 00:47:26.705000 audit[2483]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001e5d90 items=0 ppid=2473 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656334336135366462396637326435343035323866616662623932 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit: BPF prog-id=121 op=LOAD Jul 10 00:47:26.705000 audit[2483]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001e5dd8 items=0 ppid=2473 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656334336135366462396637326435343035323866616662623932 Jul 10 00:47:26.705000 audit: BPF prog-id=121 op=UNLOAD Jul 10 00:47:26.705000 audit: BPF prog-id=120 op=UNLOAD Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { perfmon } for pid=2483 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit[2483]: AVC avc: denied { bpf } for pid=2483 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:26.705000 audit: BPF prog-id=122 op=LOAD Jul 10 00:47:26.705000 audit[2483]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0002c81e8 items=0 ppid=2473 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:26.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533656334336135366462396637326435343035323866616662623932 Jul 10 00:47:26.721149 env[1209]: time="2025-07-10T00:47:26.721099718Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-h2t4d,Uid:92fa4b77-4c8c-41ac-b32f-6a6ad34e4231,Namespace:calico-system,Attempt:0,} returns sandbox id \"e3ec43a56db9f72d540528fafbb92f90b675adcdb7e0ff1528e350777f5d8d17\"" Jul 10 00:47:26.726357 kubelet[1964]: E0710 00:47:26.726328 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.726357 kubelet[1964]: W0710 00:47:26.726345 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.726466 kubelet[1964]: E0710 00:47:26.726361 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.726643 kubelet[1964]: E0710 00:47:26.726626 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.726643 kubelet[1964]: W0710 00:47:26.726636 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.726643 kubelet[1964]: E0710 00:47:26.726644 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.726829 kubelet[1964]: E0710 00:47:26.726815 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.726829 kubelet[1964]: W0710 00:47:26.726826 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.726881 kubelet[1964]: E0710 00:47:26.726834 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.727136 kubelet[1964]: E0710 00:47:26.727096 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.727136 kubelet[1964]: W0710 00:47:26.727127 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.727186 kubelet[1964]: E0710 00:47:26.727145 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.727419 kubelet[1964]: E0710 00:47:26.727383 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.727419 kubelet[1964]: W0710 00:47:26.727395 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.727419 kubelet[1964]: E0710 00:47:26.727402 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.727595 kubelet[1964]: E0710 00:47:26.727579 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.727595 kubelet[1964]: W0710 00:47:26.727589 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.727595 kubelet[1964]: E0710 00:47:26.727597 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.727908 kubelet[1964]: E0710 00:47:26.727890 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.727908 kubelet[1964]: W0710 00:47:26.727903 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.728039 kubelet[1964]: E0710 00:47:26.727912 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.728039 kubelet[1964]: E0710 00:47:26.728040 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.728172 kubelet[1964]: W0710 00:47:26.728047 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.728172 kubelet[1964]: E0710 00:47:26.728054 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.728305 kubelet[1964]: E0710 00:47:26.728241 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.728305 kubelet[1964]: W0710 00:47:26.728251 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.728305 kubelet[1964]: E0710 00:47:26.728260 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.728486 kubelet[1964]: E0710 00:47:26.728475 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.728486 kubelet[1964]: W0710 00:47:26.728484 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.728544 kubelet[1964]: E0710 00:47:26.728491 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.728786 kubelet[1964]: E0710 00:47:26.728759 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.728786 kubelet[1964]: W0710 00:47:26.728772 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.728860 kubelet[1964]: E0710 00:47:26.728790 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.728995 kubelet[1964]: E0710 00:47:26.728971 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.728995 kubelet[1964]: W0710 00:47:26.728983 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.728995 kubelet[1964]: E0710 00:47:26.728991 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.729207 kubelet[1964]: E0710 00:47:26.729194 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.729207 kubelet[1964]: W0710 00:47:26.729204 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.729257 kubelet[1964]: E0710 00:47:26.729211 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.729413 kubelet[1964]: E0710 00:47:26.729399 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.729413 kubelet[1964]: W0710 00:47:26.729410 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.729548 kubelet[1964]: E0710 00:47:26.729418 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.729995 kubelet[1964]: E0710 00:47:26.729800 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.729995 kubelet[1964]: W0710 00:47:26.729813 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.729995 kubelet[1964]: E0710 00:47:26.729823 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.730111 kubelet[1964]: E0710 00:47:26.730086 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.730111 kubelet[1964]: W0710 00:47:26.730094 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.730111 kubelet[1964]: E0710 00:47:26.730102 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.730301 kubelet[1964]: E0710 00:47:26.730285 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.730301 kubelet[1964]: W0710 00:47:26.730296 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.730407 kubelet[1964]: E0710 00:47:26.730306 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.730526 kubelet[1964]: E0710 00:47:26.730502 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.730526 kubelet[1964]: W0710 00:47:26.730517 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.730526 kubelet[1964]: E0710 00:47:26.730526 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.730783 kubelet[1964]: E0710 00:47:26.730764 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.730783 kubelet[1964]: W0710 00:47:26.730777 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.730783 kubelet[1964]: E0710 00:47:26.730785 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.730987 kubelet[1964]: E0710 00:47:26.730973 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.730987 kubelet[1964]: W0710 00:47:26.730982 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.731065 kubelet[1964]: E0710 00:47:26.730989 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.731423 kubelet[1964]: E0710 00:47:26.731392 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.731423 kubelet[1964]: W0710 00:47:26.731419 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.731485 kubelet[1964]: E0710 00:47:26.731428 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.731635 kubelet[1964]: E0710 00:47:26.731613 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.731635 kubelet[1964]: W0710 00:47:26.731624 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.731635 kubelet[1964]: E0710 00:47:26.731631 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.731796 kubelet[1964]: E0710 00:47:26.731784 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.731796 kubelet[1964]: W0710 00:47:26.731794 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.731847 kubelet[1964]: E0710 00:47:26.731801 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.732024 kubelet[1964]: E0710 00:47:26.732007 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.732024 kubelet[1964]: W0710 00:47:26.732018 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.732097 kubelet[1964]: E0710 00:47:26.732026 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.732349 kubelet[1964]: E0710 00:47:26.732323 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.732349 kubelet[1964]: W0710 00:47:26.732338 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.732349 kubelet[1964]: E0710 00:47:26.732346 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:26.739454 kubelet[1964]: E0710 00:47:26.739432 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:26.739454 kubelet[1964]: W0710 00:47:26.739444 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:26.739551 kubelet[1964]: E0710 00:47:26.739463 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:27.227319 systemd[1]: run-containerd-runc-k8s.io-8e1a21dad35cb6606f1f4d504502a5d88eaa4ce9689514a6cfc5ba30d8963499-runc.O3Tw7x.mount: Deactivated successfully. Jul 10 00:47:27.318000 audit[2533]: NETFILTER_CFG table=filter:97 family=2 entries=22 op=nft_register_rule pid=2533 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:27.318000 audit[2533]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffec5748e50 a2=0 a3=7ffec5748e3c items=0 ppid=2118 pid=2533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:27.318000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:27.326000 audit[2533]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2533 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:27.326000 audit[2533]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffec5748e50 a2=0 a3=0 items=0 ppid=2118 pid=2533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:27.326000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:27.904965 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3507434210.mount: Deactivated successfully. Jul 10 00:47:28.232136 kubelet[1964]: E0710 00:47:28.231503 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dwxds" podUID="5b03f62d-564c-468f-af64-90b8cb619060" Jul 10 00:47:29.792754 env[1209]: time="2025-07-10T00:47:29.792693571Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:29.794660 env[1209]: time="2025-07-10T00:47:29.794627386Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:29.795954 env[1209]: time="2025-07-10T00:47:29.795926219Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:29.797244 env[1209]: time="2025-07-10T00:47:29.797209385Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:29.797690 env[1209]: time="2025-07-10T00:47:29.797659412Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 10 00:47:29.798487 env[1209]: time="2025-07-10T00:47:29.798460388Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 10 00:47:29.808468 env[1209]: time="2025-07-10T00:47:29.808419571Z" level=info msg="CreateContainer within sandbox \"8e1a21dad35cb6606f1f4d504502a5d88eaa4ce9689514a6cfc5ba30d8963499\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 10 00:47:29.820847 env[1209]: time="2025-07-10T00:47:29.820810978Z" level=info msg="CreateContainer within sandbox \"8e1a21dad35cb6606f1f4d504502a5d88eaa4ce9689514a6cfc5ba30d8963499\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"1ef40b10b882883368b0a69cab78ae59e61e2259a5fda99860ecdf4a142a2291\"" Jul 10 00:47:29.821291 env[1209]: time="2025-07-10T00:47:29.821268470Z" level=info msg="StartContainer for \"1ef40b10b882883368b0a69cab78ae59e61e2259a5fda99860ecdf4a142a2291\"" Jul 10 00:47:29.838840 systemd[1]: Started cri-containerd-1ef40b10b882883368b0a69cab78ae59e61e2259a5fda99860ecdf4a142a2291.scope. Jul 10 00:47:29.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.855967 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 10 00:47:29.856033 kernel: audit: type=1400 audit(1752108449.853:956): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864582 kernel: audit: type=1400 audit(1752108449.853:957): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864631 kernel: audit: type=1400 audit(1752108449.853:958): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.868181 kernel: audit: type=1400 audit(1752108449.853:959): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.874411 kernel: audit: type=1400 audit(1752108449.853:960): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.874513 kernel: audit: type=1400 audit(1752108449.853:961): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.874600 kernel: audit: type=1400 audit(1752108449.853:962): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.877419 kernel: audit: type=1400 audit(1752108449.853:963): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.883183 kernel: audit: type=1400 audit(1752108449.853:964): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit: BPF prog-id=123 op=LOAD Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2394 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:29.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165663430623130623838323838333336386230613639636162373861 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2394 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:29.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165663430623130623838323838333336386230613639636162373861 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.888420 kernel: audit: type=1400 audit(1752108449.858:965): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.858000 audit: BPF prog-id=124 op=LOAD Jul 10 00:47:29.858000 audit[2543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000337d40 items=0 ppid=2394 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:29.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165663430623130623838323838333336386230613639636162373861 Jul 10 00:47:29.861000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.861000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.861000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.861000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.861000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.861000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.861000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.861000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.861000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.861000 audit: BPF prog-id=125 op=LOAD Jul 10 00:47:29.861000 audit[2543]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000337d88 items=0 ppid=2394 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:29.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165663430623130623838323838333336386230613639636162373861 Jul 10 00:47:29.864000 audit: BPF prog-id=125 op=UNLOAD Jul 10 00:47:29.864000 audit: BPF prog-id=124 op=UNLOAD Jul 10 00:47:29.864000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864000 audit[2543]: AVC avc: denied { perfmon } for pid=2543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864000 audit[2543]: AVC avc: denied { bpf } for pid=2543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:29.864000 audit: BPF prog-id=126 op=LOAD Jul 10 00:47:29.864000 audit[2543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003a0198 items=0 ppid=2394 pid=2543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:29.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165663430623130623838323838333336386230613639636162373861 Jul 10 00:47:30.033103 env[1209]: time="2025-07-10T00:47:30.033047102Z" level=info msg="StartContainer for \"1ef40b10b882883368b0a69cab78ae59e61e2259a5fda99860ecdf4a142a2291\" returns successfully" Jul 10 00:47:30.231729 kubelet[1964]: E0710 00:47:30.231362 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dwxds" podUID="5b03f62d-564c-468f-af64-90b8cb619060" Jul 10 00:47:30.273241 kubelet[1964]: E0710 00:47:30.273214 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:30.345746 kubelet[1964]: E0710 00:47:30.345712 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.345746 kubelet[1964]: W0710 00:47:30.345728 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.345746 kubelet[1964]: E0710 00:47:30.345746 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.345966 kubelet[1964]: E0710 00:47:30.345899 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.345966 kubelet[1964]: W0710 00:47:30.345906 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.345966 kubelet[1964]: E0710 00:47:30.345914 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.346063 kubelet[1964]: E0710 00:47:30.346050 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.346063 kubelet[1964]: W0710 00:47:30.346059 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.346116 kubelet[1964]: E0710 00:47:30.346065 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.346257 kubelet[1964]: E0710 00:47:30.346237 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.346257 kubelet[1964]: W0710 00:47:30.346247 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.346257 kubelet[1964]: E0710 00:47:30.346254 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.346422 kubelet[1964]: E0710 00:47:30.346411 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.346422 kubelet[1964]: W0710 00:47:30.346420 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.346478 kubelet[1964]: E0710 00:47:30.346428 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.346589 kubelet[1964]: E0710 00:47:30.346573 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.346589 kubelet[1964]: W0710 00:47:30.346582 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.346589 kubelet[1964]: E0710 00:47:30.346592 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.346815 kubelet[1964]: E0710 00:47:30.346798 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.346815 kubelet[1964]: W0710 00:47:30.346808 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.346815 kubelet[1964]: E0710 00:47:30.346815 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.346979 kubelet[1964]: E0710 00:47:30.346966 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.346979 kubelet[1964]: W0710 00:47:30.346975 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.347033 kubelet[1964]: E0710 00:47:30.346981 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.347145 kubelet[1964]: E0710 00:47:30.347132 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.347145 kubelet[1964]: W0710 00:47:30.347143 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.347191 kubelet[1964]: E0710 00:47:30.347150 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.347305 kubelet[1964]: E0710 00:47:30.347293 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.347305 kubelet[1964]: W0710 00:47:30.347302 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.347457 kubelet[1964]: E0710 00:47:30.347309 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.347486 kubelet[1964]: E0710 00:47:30.347458 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.347486 kubelet[1964]: W0710 00:47:30.347465 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.347486 kubelet[1964]: E0710 00:47:30.347473 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.347649 kubelet[1964]: E0710 00:47:30.347637 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.347649 kubelet[1964]: W0710 00:47:30.347646 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.347700 kubelet[1964]: E0710 00:47:30.347653 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.347812 kubelet[1964]: E0710 00:47:30.347800 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.347812 kubelet[1964]: W0710 00:47:30.347809 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.347862 kubelet[1964]: E0710 00:47:30.347815 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.347973 kubelet[1964]: E0710 00:47:30.347962 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.347973 kubelet[1964]: W0710 00:47:30.347970 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.348026 kubelet[1964]: E0710 00:47:30.347978 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.348125 kubelet[1964]: E0710 00:47:30.348113 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.348125 kubelet[1964]: W0710 00:47:30.348122 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.348177 kubelet[1964]: E0710 00:47:30.348131 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.352511 kubelet[1964]: E0710 00:47:30.352485 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.352511 kubelet[1964]: W0710 00:47:30.352502 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.352589 kubelet[1964]: E0710 00:47:30.352520 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.352727 kubelet[1964]: E0710 00:47:30.352711 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.352727 kubelet[1964]: W0710 00:47:30.352720 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.352781 kubelet[1964]: E0710 00:47:30.352741 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.352919 kubelet[1964]: E0710 00:47:30.352905 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.352919 kubelet[1964]: W0710 00:47:30.352914 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.352971 kubelet[1964]: E0710 00:47:30.352920 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.353115 kubelet[1964]: E0710 00:47:30.353093 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.353115 kubelet[1964]: W0710 00:47:30.353106 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.353115 kubelet[1964]: E0710 00:47:30.353115 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.353283 kubelet[1964]: E0710 00:47:30.353272 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.353283 kubelet[1964]: W0710 00:47:30.353280 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.353336 kubelet[1964]: E0710 00:47:30.353288 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.353463 kubelet[1964]: E0710 00:47:30.353451 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.353463 kubelet[1964]: W0710 00:47:30.353461 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.353518 kubelet[1964]: E0710 00:47:30.353469 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.353743 kubelet[1964]: E0710 00:47:30.353721 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.353776 kubelet[1964]: W0710 00:47:30.353742 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.353776 kubelet[1964]: E0710 00:47:30.353765 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.354029 kubelet[1964]: E0710 00:47:30.354016 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.354053 kubelet[1964]: W0710 00:47:30.354028 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.354053 kubelet[1964]: E0710 00:47:30.354036 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.354210 kubelet[1964]: E0710 00:47:30.354201 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.354234 kubelet[1964]: W0710 00:47:30.354209 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.354234 kubelet[1964]: E0710 00:47:30.354216 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.354367 kubelet[1964]: E0710 00:47:30.354359 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.354367 kubelet[1964]: W0710 00:47:30.354366 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.354427 kubelet[1964]: E0710 00:47:30.354386 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.354554 kubelet[1964]: E0710 00:47:30.354536 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.354554 kubelet[1964]: W0710 00:47:30.354552 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.354616 kubelet[1964]: E0710 00:47:30.354558 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.354733 kubelet[1964]: E0710 00:47:30.354724 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.354759 kubelet[1964]: W0710 00:47:30.354732 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.354759 kubelet[1964]: E0710 00:47:30.354738 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.354916 kubelet[1964]: E0710 00:47:30.354903 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.354916 kubelet[1964]: W0710 00:47:30.354911 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.354916 kubelet[1964]: E0710 00:47:30.354917 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.355227 kubelet[1964]: E0710 00:47:30.355208 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.355227 kubelet[1964]: W0710 00:47:30.355222 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.355227 kubelet[1964]: E0710 00:47:30.355231 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.355406 kubelet[1964]: E0710 00:47:30.355369 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.355406 kubelet[1964]: W0710 00:47:30.355399 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.355406 kubelet[1964]: E0710 00:47:30.355407 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.355598 kubelet[1964]: E0710 00:47:30.355583 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.355598 kubelet[1964]: W0710 00:47:30.355593 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.355598 kubelet[1964]: E0710 00:47:30.355600 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.355883 kubelet[1964]: E0710 00:47:30.355866 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.355883 kubelet[1964]: W0710 00:47:30.355879 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.355936 kubelet[1964]: E0710 00:47:30.355888 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.356063 kubelet[1964]: E0710 00:47:30.356047 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:30.356063 kubelet[1964]: W0710 00:47:30.356057 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:30.356063 kubelet[1964]: E0710 00:47:30.356064 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:30.747800 kubelet[1964]: I0710 00:47:30.747734 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-758c84dd98-x5b7j" podStartSLOduration=1.393890999 podStartE2EDuration="4.747716623s" podCreationTimestamp="2025-07-10 00:47:26 +0000 UTC" firstStartedPulling="2025-07-10 00:47:26.444510416 +0000 UTC m=+16.298402875" lastFinishedPulling="2025-07-10 00:47:29.79833604 +0000 UTC m=+19.652228499" observedRunningTime="2025-07-10 00:47:30.28307487 +0000 UTC m=+20.136967329" watchObservedRunningTime="2025-07-10 00:47:30.747716623 +0000 UTC m=+20.601609082" Jul 10 00:47:30.758000 audit[2612]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:30.758000 audit[2612]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff7b2b4600 a2=0 a3=7fff7b2b45ec items=0 ppid=2118 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:30.758000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:30.765000 audit[2612]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:30.765000 audit[2612]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff7b2b4600 a2=0 a3=7fff7b2b45ec items=0 ppid=2118 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:30.765000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:31.274473 kubelet[1964]: E0710 00:47:31.274435 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:31.357310 kubelet[1964]: E0710 00:47:31.357271 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.357310 kubelet[1964]: W0710 00:47:31.357291 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.357310 kubelet[1964]: E0710 00:47:31.357307 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.357579 kubelet[1964]: E0710 00:47:31.357569 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.357579 kubelet[1964]: W0710 00:47:31.357577 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.357634 kubelet[1964]: E0710 00:47:31.357586 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.357786 kubelet[1964]: E0710 00:47:31.357764 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.357786 kubelet[1964]: W0710 00:47:31.357775 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.357786 kubelet[1964]: E0710 00:47:31.357782 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.357984 kubelet[1964]: E0710 00:47:31.357968 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.357984 kubelet[1964]: W0710 00:47:31.357977 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.357984 kubelet[1964]: E0710 00:47:31.357984 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.358174 kubelet[1964]: E0710 00:47:31.358151 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.358174 kubelet[1964]: W0710 00:47:31.358171 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.358231 kubelet[1964]: E0710 00:47:31.358179 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.358343 kubelet[1964]: E0710 00:47:31.358321 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.358343 kubelet[1964]: W0710 00:47:31.358339 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.358415 kubelet[1964]: E0710 00:47:31.358346 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.358509 kubelet[1964]: E0710 00:47:31.358494 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.358509 kubelet[1964]: W0710 00:47:31.358503 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.358509 kubelet[1964]: E0710 00:47:31.358510 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.358672 kubelet[1964]: E0710 00:47:31.358658 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.358672 kubelet[1964]: W0710 00:47:31.358667 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.358720 kubelet[1964]: E0710 00:47:31.358674 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.358897 kubelet[1964]: E0710 00:47:31.358881 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.358897 kubelet[1964]: W0710 00:47:31.358890 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.358897 kubelet[1964]: E0710 00:47:31.358897 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.359060 kubelet[1964]: E0710 00:47:31.359046 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.359060 kubelet[1964]: W0710 00:47:31.359055 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.359144 kubelet[1964]: E0710 00:47:31.359062 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.359252 kubelet[1964]: E0710 00:47:31.359224 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.359252 kubelet[1964]: W0710 00:47:31.359246 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.359252 kubelet[1964]: E0710 00:47:31.359256 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.359443 kubelet[1964]: E0710 00:47:31.359427 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.359443 kubelet[1964]: W0710 00:47:31.359437 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.359443 kubelet[1964]: E0710 00:47:31.359444 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.359626 kubelet[1964]: E0710 00:47:31.359612 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.359654 kubelet[1964]: W0710 00:47:31.359622 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.359654 kubelet[1964]: E0710 00:47:31.359641 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.359791 kubelet[1964]: E0710 00:47:31.359776 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.359791 kubelet[1964]: W0710 00:47:31.359784 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.359791 kubelet[1964]: E0710 00:47:31.359790 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.359932 kubelet[1964]: E0710 00:47:31.359918 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.359932 kubelet[1964]: W0710 00:47:31.359928 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.359980 kubelet[1964]: E0710 00:47:31.359935 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.360221 kubelet[1964]: E0710 00:47:31.360203 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.360221 kubelet[1964]: W0710 00:47:31.360213 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.360221 kubelet[1964]: E0710 00:47:31.360221 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.360453 kubelet[1964]: E0710 00:47:31.360425 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.360453 kubelet[1964]: W0710 00:47:31.360450 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.360520 kubelet[1964]: E0710 00:47:31.360475 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.360742 kubelet[1964]: E0710 00:47:31.360728 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.360742 kubelet[1964]: W0710 00:47:31.360737 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.360742 kubelet[1964]: E0710 00:47:31.360745 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.360987 kubelet[1964]: E0710 00:47:31.360965 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.360987 kubelet[1964]: W0710 00:47:31.360979 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.360987 kubelet[1964]: E0710 00:47:31.360988 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.361152 kubelet[1964]: E0710 00:47:31.361137 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.361152 kubelet[1964]: W0710 00:47:31.361146 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.361152 kubelet[1964]: E0710 00:47:31.361153 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.361306 kubelet[1964]: E0710 00:47:31.361291 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.361306 kubelet[1964]: W0710 00:47:31.361302 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.361388 kubelet[1964]: E0710 00:47:31.361310 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.361508 kubelet[1964]: E0710 00:47:31.361487 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.361508 kubelet[1964]: W0710 00:47:31.361498 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.361508 kubelet[1964]: E0710 00:47:31.361506 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.361864 kubelet[1964]: E0710 00:47:31.361834 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.361864 kubelet[1964]: W0710 00:47:31.361846 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.361864 kubelet[1964]: E0710 00:47:31.361855 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.362028 kubelet[1964]: E0710 00:47:31.362014 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.362028 kubelet[1964]: W0710 00:47:31.362023 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.362028 kubelet[1964]: E0710 00:47:31.362030 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.362344 kubelet[1964]: E0710 00:47:31.362332 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.362344 kubelet[1964]: W0710 00:47:31.362341 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.362475 kubelet[1964]: E0710 00:47:31.362350 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.362551 kubelet[1964]: E0710 00:47:31.362522 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.362551 kubelet[1964]: W0710 00:47:31.362532 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.362551 kubelet[1964]: E0710 00:47:31.362548 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.362735 kubelet[1964]: E0710 00:47:31.362721 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.362735 kubelet[1964]: W0710 00:47:31.362730 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.362791 kubelet[1964]: E0710 00:47:31.362737 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.362916 kubelet[1964]: E0710 00:47:31.362904 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.362916 kubelet[1964]: W0710 00:47:31.362913 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.362970 kubelet[1964]: E0710 00:47:31.362920 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.363142 kubelet[1964]: E0710 00:47:31.363128 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.363142 kubelet[1964]: W0710 00:47:31.363139 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.363194 kubelet[1964]: E0710 00:47:31.363148 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.363279 kubelet[1964]: E0710 00:47:31.363264 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.363279 kubelet[1964]: W0710 00:47:31.363273 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.363279 kubelet[1964]: E0710 00:47:31.363280 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.363485 kubelet[1964]: E0710 00:47:31.363467 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.363485 kubelet[1964]: W0710 00:47:31.363480 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.363581 kubelet[1964]: E0710 00:47:31.363493 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.363751 kubelet[1964]: E0710 00:47:31.363734 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.363751 kubelet[1964]: W0710 00:47:31.363746 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.363751 kubelet[1964]: E0710 00:47:31.363754 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.363925 kubelet[1964]: E0710 00:47:31.363911 1964 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:47:31.363925 kubelet[1964]: W0710 00:47:31.363921 1964 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:47:31.363976 kubelet[1964]: E0710 00:47:31.363927 1964 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:47:31.697222 env[1209]: time="2025-07-10T00:47:31.697166277Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:31.699035 env[1209]: time="2025-07-10T00:47:31.698997271Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 10 00:47:31.699257 env[1209]: time="2025-07-10T00:47:31.699228521Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:31.699662 env[1209]: time="2025-07-10T00:47:31.699635516Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:31.700048 env[1209]: time="2025-07-10T00:47:31.700017352Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:31.710816 env[1209]: time="2025-07-10T00:47:31.710770953Z" level=info msg="CreateContainer within sandbox \"e3ec43a56db9f72d540528fafbb92f90b675adcdb7e0ff1528e350777f5d8d17\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 10 00:47:31.727251 env[1209]: time="2025-07-10T00:47:31.727191697Z" level=info msg="CreateContainer within sandbox \"e3ec43a56db9f72d540528fafbb92f90b675adcdb7e0ff1528e350777f5d8d17\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"f68d01f6844b18757261c22fbb80dcc13e1c4817ef88f31036df73f8fa6acbaa\"" Jul 10 00:47:31.727985 env[1209]: time="2025-07-10T00:47:31.727952574Z" level=info msg="StartContainer for \"f68d01f6844b18757261c22fbb80dcc13e1c4817ef88f31036df73f8fa6acbaa\"" Jul 10 00:47:31.757226 systemd[1]: Started cri-containerd-f68d01f6844b18757261c22fbb80dcc13e1c4817ef88f31036df73f8fa6acbaa.scope. Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7feca061a728 items=0 ppid=2473 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:31.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636386430316636383434623138373537323631633232666262383064 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit: BPF prog-id=127 op=LOAD Jul 10 00:47:31.773000 audit[2653]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002cd168 items=0 ppid=2473 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:31.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636386430316636383434623138373537323631633232666262383064 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit: BPF prog-id=128 op=LOAD Jul 10 00:47:31.773000 audit[2653]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0002cd1b8 items=0 ppid=2473 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:31.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636386430316636383434623138373537323631633232666262383064 Jul 10 00:47:31.773000 audit: BPF prog-id=128 op=UNLOAD Jul 10 00:47:31.773000 audit: BPF prog-id=127 op=UNLOAD Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { perfmon } for pid=2653 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit[2653]: AVC avc: denied { bpf } for pid=2653 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:31.773000 audit: BPF prog-id=129 op=LOAD Jul 10 00:47:31.773000 audit[2653]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002cd248 items=0 ppid=2473 pid=2653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:31.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636386430316636383434623138373537323631633232666262383064 Jul 10 00:47:31.796711 systemd[1]: cri-containerd-f68d01f6844b18757261c22fbb80dcc13e1c4817ef88f31036df73f8fa6acbaa.scope: Deactivated successfully. Jul 10 00:47:31.800000 audit: BPF prog-id=129 op=UNLOAD Jul 10 00:47:31.804116 systemd[1]: run-containerd-runc-k8s.io-f68d01f6844b18757261c22fbb80dcc13e1c4817ef88f31036df73f8fa6acbaa-runc.EahUZy.mount: Deactivated successfully. Jul 10 00:47:31.843842 env[1209]: time="2025-07-10T00:47:31.843728118Z" level=info msg="StartContainer for \"f68d01f6844b18757261c22fbb80dcc13e1c4817ef88f31036df73f8fa6acbaa\" returns successfully" Jul 10 00:47:31.863159 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f68d01f6844b18757261c22fbb80dcc13e1c4817ef88f31036df73f8fa6acbaa-rootfs.mount: Deactivated successfully. Jul 10 00:47:31.882406 env[1209]: time="2025-07-10T00:47:31.882340616Z" level=info msg="shim disconnected" id=f68d01f6844b18757261c22fbb80dcc13e1c4817ef88f31036df73f8fa6acbaa Jul 10 00:47:31.882406 env[1209]: time="2025-07-10T00:47:31.882401653Z" level=warning msg="cleaning up after shim disconnected" id=f68d01f6844b18757261c22fbb80dcc13e1c4817ef88f31036df73f8fa6acbaa namespace=k8s.io Jul 10 00:47:31.882609 env[1209]: time="2025-07-10T00:47:31.882414367Z" level=info msg="cleaning up dead shim" Jul 10 00:47:31.889532 env[1209]: time="2025-07-10T00:47:31.889482756Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:47:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2693 runtime=io.containerd.runc.v2\n" Jul 10 00:47:32.232079 kubelet[1964]: E0710 00:47:32.232035 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dwxds" podUID="5b03f62d-564c-468f-af64-90b8cb619060" Jul 10 00:47:32.277287 kubelet[1964]: E0710 00:47:32.277245 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:32.278042 env[1209]: time="2025-07-10T00:47:32.278001293Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 10 00:47:34.235723 kubelet[1964]: E0710 00:47:34.235663 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dwxds" podUID="5b03f62d-564c-468f-af64-90b8cb619060" Jul 10 00:47:35.420448 env[1209]: time="2025-07-10T00:47:35.420403551Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:35.422675 env[1209]: time="2025-07-10T00:47:35.422622153Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:35.424272 env[1209]: time="2025-07-10T00:47:35.424237290Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:35.425705 env[1209]: time="2025-07-10T00:47:35.425663197Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:35.426130 env[1209]: time="2025-07-10T00:47:35.426097712Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 10 00:47:35.430134 env[1209]: time="2025-07-10T00:47:35.430107426Z" level=info msg="CreateContainer within sandbox \"e3ec43a56db9f72d540528fafbb92f90b675adcdb7e0ff1528e350777f5d8d17\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 10 00:47:35.447420 env[1209]: time="2025-07-10T00:47:35.447360314Z" level=info msg="CreateContainer within sandbox \"e3ec43a56db9f72d540528fafbb92f90b675adcdb7e0ff1528e350777f5d8d17\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"09add2def86b79b3d18bf9f41d98b5f0bd680a6954f47e170fcf5004ee345acb\"" Jul 10 00:47:35.447868 env[1209]: time="2025-07-10T00:47:35.447838201Z" level=info msg="StartContainer for \"09add2def86b79b3d18bf9f41d98b5f0bd680a6954f47e170fcf5004ee345acb\"" Jul 10 00:47:35.466297 systemd[1]: Started cri-containerd-09add2def86b79b3d18bf9f41d98b5f0bd680a6954f47e170fcf5004ee345acb.scope. Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.482397 kernel: kauditd_printk_skb: 97 callbacks suppressed Jul 10 00:47:35.482465 kernel: audit: type=1400 audit(1752108455.477:983): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.482491 kernel: audit: type=1300 audit(1752108455.477:983): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f554df58c20 items=0 ppid=2473 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:35.477000 audit[2717]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f554df58c20 items=0 ppid=2473 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:35.500423 kernel: audit: type=1327 audit(1752108455.477:983): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039616464326465663836623739623364313862663966343164393862 Jul 10 00:47:35.500573 kernel: audit: type=1400 audit(1752108455.477:984): avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.500599 kernel: audit: type=1400 audit(1752108455.477:984): avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.500617 kernel: audit: type=1400 audit(1752108455.477:984): avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039616464326465663836623739623364313862663966343164393862 Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.502663 kernel: audit: type=1400 audit(1752108455.477:984): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.513470 kernel: audit: type=1400 audit(1752108455.477:984): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.513553 kernel: audit: type=1400 audit(1752108455.477:984): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.516421 kernel: audit: type=1400 audit(1752108455.477:984): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.477000 audit: BPF prog-id=130 op=LOAD Jul 10 00:47:35.477000 audit[2717]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003ee528 items=0 ppid=2473 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:35.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039616464326465663836623739623364313862663966343164393862 Jul 10 00:47:35.486000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.486000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.486000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.486000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.486000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.486000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.486000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.486000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.486000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.486000 audit: BPF prog-id=131 op=LOAD Jul 10 00:47:35.486000 audit[2717]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003ee578 items=0 ppid=2473 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:35.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039616464326465663836623739623364313862663966343164393862 Jul 10 00:47:35.492000 audit: BPF prog-id=131 op=UNLOAD Jul 10 00:47:35.492000 audit: BPF prog-id=130 op=UNLOAD Jul 10 00:47:35.492000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.492000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.492000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.492000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.492000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.492000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.492000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.492000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.492000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.492000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:35.492000 audit: BPF prog-id=132 op=LOAD Jul 10 00:47:35.492000 audit[2717]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003ee608 items=0 ppid=2473 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:35.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039616464326465663836623739623364313862663966343164393862 Jul 10 00:47:35.782835 env[1209]: time="2025-07-10T00:47:35.782759605Z" level=info msg="StartContainer for \"09add2def86b79b3d18bf9f41d98b5f0bd680a6954f47e170fcf5004ee345acb\" returns successfully" Jul 10 00:47:36.231903 kubelet[1964]: E0710 00:47:36.231191 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-dwxds" podUID="5b03f62d-564c-468f-af64-90b8cb619060" Jul 10 00:47:36.677085 systemd[1]: cri-containerd-09add2def86b79b3d18bf9f41d98b5f0bd680a6954f47e170fcf5004ee345acb.scope: Deactivated successfully. Jul 10 00:47:36.678530 kubelet[1964]: I0710 00:47:36.678493 1964 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 10 00:47:36.680000 audit: BPF prog-id=132 op=UNLOAD Jul 10 00:47:36.700672 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-09add2def86b79b3d18bf9f41d98b5f0bd680a6954f47e170fcf5004ee345acb-rootfs.mount: Deactivated successfully. Jul 10 00:47:36.705627 env[1209]: time="2025-07-10T00:47:36.705562243Z" level=info msg="shim disconnected" id=09add2def86b79b3d18bf9f41d98b5f0bd680a6954f47e170fcf5004ee345acb Jul 10 00:47:36.705627 env[1209]: time="2025-07-10T00:47:36.705612308Z" level=warning msg="cleaning up after shim disconnected" id=09add2def86b79b3d18bf9f41d98b5f0bd680a6954f47e170fcf5004ee345acb namespace=k8s.io Jul 10 00:47:36.705627 env[1209]: time="2025-07-10T00:47:36.705634169Z" level=info msg="cleaning up dead shim" Jul 10 00:47:36.718574 systemd[1]: Created slice kubepods-besteffort-pod737fd0bf_a61e_49c6_80d2_cab480161f57.slice. Jul 10 00:47:36.724046 systemd[1]: Created slice kubepods-besteffort-pod44f4e572_f541_4255_a16c_ef3be90dc5fc.slice. Jul 10 00:47:36.726017 env[1209]: time="2025-07-10T00:47:36.725869523Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:47:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2757 runtime=io.containerd.runc.v2\n" Jul 10 00:47:36.729697 systemd[1]: Created slice kubepods-besteffort-pod7971856c_7069_4d9d_9ccc_de726a8a0019.slice. Jul 10 00:47:36.734230 systemd[1]: Created slice kubepods-besteffort-poddc95b02f_1623_40c8_ae17_bd260422ebf1.slice. Jul 10 00:47:36.738905 systemd[1]: Created slice kubepods-burstable-pod7a6b8eea_16ad_40b4_afaf_f5fa82aa05e9.slice. Jul 10 00:47:36.743581 systemd[1]: Created slice kubepods-besteffort-podc52c6bb9_57dd_465e_a201_459c0e30980c.slice. Jul 10 00:47:36.749003 systemd[1]: Created slice kubepods-burstable-podfad3c025_db1a_4fad_a522_ba2e599e52d0.slice. Jul 10 00:47:36.798949 kubelet[1964]: I0710 00:47:36.798893 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/44f4e572-f541-4255-a16c-ef3be90dc5fc-goldmane-key-pair\") pod \"goldmane-768f4c5c69-2rwwm\" (UID: \"44f4e572-f541-4255-a16c-ef3be90dc5fc\") " pod="calico-system/goldmane-768f4c5c69-2rwwm" Jul 10 00:47:36.798949 kubelet[1964]: I0710 00:47:36.798951 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nhvnm\" (UniqueName: \"kubernetes.io/projected/44f4e572-f541-4255-a16c-ef3be90dc5fc-kube-api-access-nhvnm\") pod \"goldmane-768f4c5c69-2rwwm\" (UID: \"44f4e572-f541-4255-a16c-ef3be90dc5fc\") " pod="calico-system/goldmane-768f4c5c69-2rwwm" Jul 10 00:47:36.799133 kubelet[1964]: I0710 00:47:36.798978 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/fad3c025-db1a-4fad-a522-ba2e599e52d0-config-volume\") pod \"coredns-674b8bbfcf-c5stg\" (UID: \"fad3c025-db1a-4fad-a522-ba2e599e52d0\") " pod="kube-system/coredns-674b8bbfcf-c5stg" Jul 10 00:47:36.799133 kubelet[1964]: I0710 00:47:36.799005 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/dc95b02f-1623-40c8-ae17-bd260422ebf1-calico-apiserver-certs\") pod \"calico-apiserver-bbc66c4f5-72mzq\" (UID: \"dc95b02f-1623-40c8-ae17-bd260422ebf1\") " pod="calico-apiserver/calico-apiserver-bbc66c4f5-72mzq" Jul 10 00:47:36.799133 kubelet[1964]: I0710 00:47:36.799024 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/44f4e572-f541-4255-a16c-ef3be90dc5fc-config\") pod \"goldmane-768f4c5c69-2rwwm\" (UID: \"44f4e572-f541-4255-a16c-ef3be90dc5fc\") " pod="calico-system/goldmane-768f4c5c69-2rwwm" Jul 10 00:47:36.799133 kubelet[1964]: I0710 00:47:36.799091 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sg5wg\" (UniqueName: \"kubernetes.io/projected/dc95b02f-1623-40c8-ae17-bd260422ebf1-kube-api-access-sg5wg\") pod \"calico-apiserver-bbc66c4f5-72mzq\" (UID: \"dc95b02f-1623-40c8-ae17-bd260422ebf1\") " pod="calico-apiserver/calico-apiserver-bbc66c4f5-72mzq" Jul 10 00:47:36.799133 kubelet[1964]: I0710 00:47:36.799130 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sznt4\" (UniqueName: \"kubernetes.io/projected/737fd0bf-a61e-49c6-80d2-cab480161f57-kube-api-access-sznt4\") pod \"whisker-69b7cbf468-zsnbh\" (UID: \"737fd0bf-a61e-49c6-80d2-cab480161f57\") " pod="calico-system/whisker-69b7cbf468-zsnbh" Jul 10 00:47:36.799262 kubelet[1964]: I0710 00:47:36.799190 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/7971856c-7069-4d9d-9ccc-de726a8a0019-tigera-ca-bundle\") pod \"calico-kube-controllers-6fb9d69dc5-lhdbl\" (UID: \"7971856c-7069-4d9d-9ccc-de726a8a0019\") " pod="calico-system/calico-kube-controllers-6fb9d69dc5-lhdbl" Jul 10 00:47:36.799262 kubelet[1964]: I0710 00:47:36.799227 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/737fd0bf-a61e-49c6-80d2-cab480161f57-whisker-backend-key-pair\") pod \"whisker-69b7cbf468-zsnbh\" (UID: \"737fd0bf-a61e-49c6-80d2-cab480161f57\") " pod="calico-system/whisker-69b7cbf468-zsnbh" Jul 10 00:47:36.799262 kubelet[1964]: I0710 00:47:36.799254 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h8czj\" (UniqueName: \"kubernetes.io/projected/7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9-kube-api-access-h8czj\") pod \"coredns-674b8bbfcf-89d2r\" (UID: \"7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9\") " pod="kube-system/coredns-674b8bbfcf-89d2r" Jul 10 00:47:36.799409 kubelet[1964]: I0710 00:47:36.799272 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/44f4e572-f541-4255-a16c-ef3be90dc5fc-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-2rwwm\" (UID: \"44f4e572-f541-4255-a16c-ef3be90dc5fc\") " pod="calico-system/goldmane-768f4c5c69-2rwwm" Jul 10 00:47:36.799409 kubelet[1964]: I0710 00:47:36.799289 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9-config-volume\") pod \"coredns-674b8bbfcf-89d2r\" (UID: \"7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9\") " pod="kube-system/coredns-674b8bbfcf-89d2r" Jul 10 00:47:36.799409 kubelet[1964]: I0710 00:47:36.799308 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bhhh6\" (UniqueName: \"kubernetes.io/projected/7971856c-7069-4d9d-9ccc-de726a8a0019-kube-api-access-bhhh6\") pod \"calico-kube-controllers-6fb9d69dc5-lhdbl\" (UID: \"7971856c-7069-4d9d-9ccc-de726a8a0019\") " pod="calico-system/calico-kube-controllers-6fb9d69dc5-lhdbl" Jul 10 00:47:36.799409 kubelet[1964]: I0710 00:47:36.799323 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c52c6bb9-57dd-465e-a201-459c0e30980c-calico-apiserver-certs\") pod \"calico-apiserver-bbc66c4f5-7cmjp\" (UID: \"c52c6bb9-57dd-465e-a201-459c0e30980c\") " pod="calico-apiserver/calico-apiserver-bbc66c4f5-7cmjp" Jul 10 00:47:36.799409 kubelet[1964]: I0710 00:47:36.799342 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qjhj2\" (UniqueName: \"kubernetes.io/projected/c52c6bb9-57dd-465e-a201-459c0e30980c-kube-api-access-qjhj2\") pod \"calico-apiserver-bbc66c4f5-7cmjp\" (UID: \"c52c6bb9-57dd-465e-a201-459c0e30980c\") " pod="calico-apiserver/calico-apiserver-bbc66c4f5-7cmjp" Jul 10 00:47:36.799577 kubelet[1964]: I0710 00:47:36.799400 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/737fd0bf-a61e-49c6-80d2-cab480161f57-whisker-ca-bundle\") pod \"whisker-69b7cbf468-zsnbh\" (UID: \"737fd0bf-a61e-49c6-80d2-cab480161f57\") " pod="calico-system/whisker-69b7cbf468-zsnbh" Jul 10 00:47:36.799577 kubelet[1964]: I0710 00:47:36.799440 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-66jlq\" (UniqueName: \"kubernetes.io/projected/fad3c025-db1a-4fad-a522-ba2e599e52d0-kube-api-access-66jlq\") pod \"coredns-674b8bbfcf-c5stg\" (UID: \"fad3c025-db1a-4fad-a522-ba2e599e52d0\") " pod="kube-system/coredns-674b8bbfcf-c5stg" Jul 10 00:47:37.022806 env[1209]: time="2025-07-10T00:47:37.022769357Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-69b7cbf468-zsnbh,Uid:737fd0bf-a61e-49c6-80d2-cab480161f57,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:37.028096 env[1209]: time="2025-07-10T00:47:37.028046097Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-2rwwm,Uid:44f4e572-f541-4255-a16c-ef3be90dc5fc,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:37.033753 env[1209]: time="2025-07-10T00:47:37.033716745Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6fb9d69dc5-lhdbl,Uid:7971856c-7069-4d9d-9ccc-de726a8a0019,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:37.037430 env[1209]: time="2025-07-10T00:47:37.037404571Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bbc66c4f5-72mzq,Uid:dc95b02f-1623-40c8-ae17-bd260422ebf1,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:47:37.042671 kubelet[1964]: E0710 00:47:37.042640 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:37.042964 env[1209]: time="2025-07-10T00:47:37.042916768Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-89d2r,Uid:7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:37.047930 env[1209]: time="2025-07-10T00:47:37.047879432Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bbc66c4f5-7cmjp,Uid:c52c6bb9-57dd-465e-a201-459c0e30980c,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:47:37.051619 kubelet[1964]: E0710 00:47:37.051584 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:37.051992 env[1209]: time="2025-07-10T00:47:37.051951748Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-c5stg,Uid:fad3c025-db1a-4fad-a522-ba2e599e52d0,Namespace:kube-system,Attempt:0,}" Jul 10 00:47:37.126715 env[1209]: time="2025-07-10T00:47:37.126635287Z" level=error msg="Failed to destroy network for sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.127046 env[1209]: time="2025-07-10T00:47:37.127014917Z" level=error msg="encountered an error cleaning up failed sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.127120 env[1209]: time="2025-07-10T00:47:37.127062628Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-2rwwm,Uid:44f4e572-f541-4255-a16c-ef3be90dc5fc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.127320 kubelet[1964]: E0710 00:47:37.127284 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.127437 kubelet[1964]: E0710 00:47:37.127351 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-2rwwm" Jul 10 00:47:37.127437 kubelet[1964]: E0710 00:47:37.127390 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-2rwwm" Jul 10 00:47:37.127511 kubelet[1964]: E0710 00:47:37.127450 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-2rwwm_calico-system(44f4e572-f541-4255-a16c-ef3be90dc5fc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-2rwwm_calico-system(44f4e572-f541-4255-a16c-ef3be90dc5fc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-2rwwm" podUID="44f4e572-f541-4255-a16c-ef3be90dc5fc" Jul 10 00:47:37.144140 env[1209]: time="2025-07-10T00:47:37.144081393Z" level=error msg="Failed to destroy network for sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.144694 env[1209]: time="2025-07-10T00:47:37.144665762Z" level=error msg="encountered an error cleaning up failed sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.144815 env[1209]: time="2025-07-10T00:47:37.144785950Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-69b7cbf468-zsnbh,Uid:737fd0bf-a61e-49c6-80d2-cab480161f57,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.145211 kubelet[1964]: E0710 00:47:37.145135 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.145290 kubelet[1964]: E0710 00:47:37.145230 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-69b7cbf468-zsnbh" Jul 10 00:47:37.145290 kubelet[1964]: E0710 00:47:37.145265 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-69b7cbf468-zsnbh" Jul 10 00:47:37.145400 kubelet[1964]: E0710 00:47:37.145335 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-69b7cbf468-zsnbh_calico-system(737fd0bf-a61e-49c6-80d2-cab480161f57)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-69b7cbf468-zsnbh_calico-system(737fd0bf-a61e-49c6-80d2-cab480161f57)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-69b7cbf468-zsnbh" podUID="737fd0bf-a61e-49c6-80d2-cab480161f57" Jul 10 00:47:37.181925 env[1209]: time="2025-07-10T00:47:37.181851265Z" level=error msg="Failed to destroy network for sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.182246 env[1209]: time="2025-07-10T00:47:37.182210315Z" level=error msg="encountered an error cleaning up failed sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.182314 env[1209]: time="2025-07-10T00:47:37.182258867Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bbc66c4f5-7cmjp,Uid:c52c6bb9-57dd-465e-a201-459c0e30980c,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.182535 kubelet[1964]: E0710 00:47:37.182488 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.182713 kubelet[1964]: E0710 00:47:37.182557 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-bbc66c4f5-7cmjp" Jul 10 00:47:37.182713 kubelet[1964]: E0710 00:47:37.182579 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-bbc66c4f5-7cmjp" Jul 10 00:47:37.182713 kubelet[1964]: E0710 00:47:37.182626 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-bbc66c4f5-7cmjp_calico-apiserver(c52c6bb9-57dd-465e-a201-459c0e30980c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-bbc66c4f5-7cmjp_calico-apiserver(c52c6bb9-57dd-465e-a201-459c0e30980c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-bbc66c4f5-7cmjp" podUID="c52c6bb9-57dd-465e-a201-459c0e30980c" Jul 10 00:47:37.182890 env[1209]: time="2025-07-10T00:47:37.182827767Z" level=error msg="Failed to destroy network for sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.183293 env[1209]: time="2025-07-10T00:47:37.183249988Z" level=error msg="encountered an error cleaning up failed sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.183347 env[1209]: time="2025-07-10T00:47:37.183322466Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6fb9d69dc5-lhdbl,Uid:7971856c-7069-4d9d-9ccc-de726a8a0019,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.184272 kubelet[1964]: E0710 00:47:37.183613 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.184272 kubelet[1964]: E0710 00:47:37.183690 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6fb9d69dc5-lhdbl" Jul 10 00:47:37.184272 kubelet[1964]: E0710 00:47:37.183712 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6fb9d69dc5-lhdbl" Jul 10 00:47:37.184431 kubelet[1964]: E0710 00:47:37.183769 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6fb9d69dc5-lhdbl_calico-system(7971856c-7069-4d9d-9ccc-de726a8a0019)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6fb9d69dc5-lhdbl_calico-system(7971856c-7069-4d9d-9ccc-de726a8a0019)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6fb9d69dc5-lhdbl" podUID="7971856c-7069-4d9d-9ccc-de726a8a0019" Jul 10 00:47:37.190303 env[1209]: time="2025-07-10T00:47:37.190253314Z" level=error msg="Failed to destroy network for sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.190659 env[1209]: time="2025-07-10T00:47:37.190625920Z" level=error msg="encountered an error cleaning up failed sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.190735 env[1209]: time="2025-07-10T00:47:37.190677057Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-89d2r,Uid:7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.190954 kubelet[1964]: E0710 00:47:37.190895 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.191118 kubelet[1964]: E0710 00:47:37.190968 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-89d2r" Jul 10 00:47:37.191118 kubelet[1964]: E0710 00:47:37.190989 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-89d2r" Jul 10 00:47:37.191118 kubelet[1964]: E0710 00:47:37.191063 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-89d2r_kube-system(7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-89d2r_kube-system(7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-89d2r" podUID="7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9" Jul 10 00:47:37.200131 env[1209]: time="2025-07-10T00:47:37.200058074Z" level=error msg="Failed to destroy network for sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.200627 env[1209]: time="2025-07-10T00:47:37.200599842Z" level=error msg="encountered an error cleaning up failed sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.200737 env[1209]: time="2025-07-10T00:47:37.200707967Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-c5stg,Uid:fad3c025-db1a-4fad-a522-ba2e599e52d0,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.200967 kubelet[1964]: E0710 00:47:37.200940 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.201027 kubelet[1964]: E0710 00:47:37.200994 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-c5stg" Jul 10 00:47:37.201027 kubelet[1964]: E0710 00:47:37.201010 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-c5stg" Jul 10 00:47:37.201083 kubelet[1964]: E0710 00:47:37.201055 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-c5stg_kube-system(fad3c025-db1a-4fad-a522-ba2e599e52d0)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-c5stg_kube-system(fad3c025-db1a-4fad-a522-ba2e599e52d0)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-c5stg" podUID="fad3c025-db1a-4fad-a522-ba2e599e52d0" Jul 10 00:47:37.213498 env[1209]: time="2025-07-10T00:47:37.213454848Z" level=error msg="Failed to destroy network for sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.213777 env[1209]: time="2025-07-10T00:47:37.213740520Z" level=error msg="encountered an error cleaning up failed sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.213815 env[1209]: time="2025-07-10T00:47:37.213787730Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bbc66c4f5-72mzq,Uid:dc95b02f-1623-40c8-ae17-bd260422ebf1,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.213995 kubelet[1964]: E0710 00:47:37.213953 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.214065 kubelet[1964]: E0710 00:47:37.214011 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-bbc66c4f5-72mzq" Jul 10 00:47:37.214065 kubelet[1964]: E0710 00:47:37.214031 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-bbc66c4f5-72mzq" Jul 10 00:47:37.214122 kubelet[1964]: E0710 00:47:37.214089 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-bbc66c4f5-72mzq_calico-apiserver(dc95b02f-1623-40c8-ae17-bd260422ebf1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-bbc66c4f5-72mzq_calico-apiserver(dc95b02f-1623-40c8-ae17-bd260422ebf1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-bbc66c4f5-72mzq" podUID="dc95b02f-1623-40c8-ae17-bd260422ebf1" Jul 10 00:47:37.287328 kubelet[1964]: I0710 00:47:37.287249 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:47:37.287862 env[1209]: time="2025-07-10T00:47:37.287837888Z" level=info msg="StopPodSandbox for \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\"" Jul 10 00:47:37.290791 env[1209]: time="2025-07-10T00:47:37.290758168Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 10 00:47:37.291316 kubelet[1964]: I0710 00:47:37.291283 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:47:37.293579 kubelet[1964]: I0710 00:47:37.293478 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:47:37.294651 kubelet[1964]: I0710 00:47:37.294626 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:47:37.297858 kubelet[1964]: I0710 00:47:37.297564 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:47:37.298179 env[1209]: time="2025-07-10T00:47:37.298152605Z" level=info msg="StopPodSandbox for \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\"" Jul 10 00:47:37.298539 env[1209]: time="2025-07-10T00:47:37.298495586Z" level=info msg="StopPodSandbox for \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\"" Jul 10 00:47:37.299268 env[1209]: time="2025-07-10T00:47:37.298212890Z" level=info msg="StopPodSandbox for \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\"" Jul 10 00:47:37.299439 env[1209]: time="2025-07-10T00:47:37.298278163Z" level=info msg="StopPodSandbox for \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\"" Jul 10 00:47:37.299800 kubelet[1964]: I0710 00:47:37.299504 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:47:37.300034 env[1209]: time="2025-07-10T00:47:37.299869201Z" level=info msg="StopPodSandbox for \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\"" Jul 10 00:47:37.300475 kubelet[1964]: I0710 00:47:37.300445 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:47:37.301071 env[1209]: time="2025-07-10T00:47:37.301013612Z" level=info msg="StopPodSandbox for \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\"" Jul 10 00:47:37.327582 env[1209]: time="2025-07-10T00:47:37.327496251Z" level=error msg="StopPodSandbox for \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\" failed" error="failed to destroy network for sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.327854 kubelet[1964]: E0710 00:47:37.327779 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:47:37.327939 kubelet[1964]: E0710 00:47:37.327866 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d"} Jul 10 00:47:37.327973 kubelet[1964]: E0710 00:47:37.327941 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"737fd0bf-a61e-49c6-80d2-cab480161f57\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:37.328037 kubelet[1964]: E0710 00:47:37.327981 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"737fd0bf-a61e-49c6-80d2-cab480161f57\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-69b7cbf468-zsnbh" podUID="737fd0bf-a61e-49c6-80d2-cab480161f57" Jul 10 00:47:37.342402 env[1209]: time="2025-07-10T00:47:37.342109313Z" level=error msg="StopPodSandbox for \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\" failed" error="failed to destroy network for sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.343528 kubelet[1964]: E0710 00:47:37.343475 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:47:37.343590 kubelet[1964]: E0710 00:47:37.343567 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8"} Jul 10 00:47:37.343657 kubelet[1964]: E0710 00:47:37.343600 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7971856c-7069-4d9d-9ccc-de726a8a0019\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:37.343730 kubelet[1964]: E0710 00:47:37.343671 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7971856c-7069-4d9d-9ccc-de726a8a0019\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6fb9d69dc5-lhdbl" podUID="7971856c-7069-4d9d-9ccc-de726a8a0019" Jul 10 00:47:37.349999 env[1209]: time="2025-07-10T00:47:37.349926984Z" level=error msg="StopPodSandbox for \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\" failed" error="failed to destroy network for sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.350248 kubelet[1964]: E0710 00:47:37.350197 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:47:37.350307 kubelet[1964]: E0710 00:47:37.350261 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27"} Jul 10 00:47:37.350307 kubelet[1964]: E0710 00:47:37.350296 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"44f4e572-f541-4255-a16c-ef3be90dc5fc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:37.350417 kubelet[1964]: E0710 00:47:37.350318 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"44f4e572-f541-4255-a16c-ef3be90dc5fc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-2rwwm" podUID="44f4e572-f541-4255-a16c-ef3be90dc5fc" Jul 10 00:47:37.350769 env[1209]: time="2025-07-10T00:47:37.350726159Z" level=error msg="StopPodSandbox for \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\" failed" error="failed to destroy network for sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.350937 kubelet[1964]: E0710 00:47:37.350908 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:47:37.351003 kubelet[1964]: E0710 00:47:37.350944 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b"} Jul 10 00:47:37.351003 kubelet[1964]: E0710 00:47:37.350967 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:37.351003 kubelet[1964]: E0710 00:47:37.350986 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-89d2r" podUID="7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9" Jul 10 00:47:37.354002 env[1209]: time="2025-07-10T00:47:37.353961387Z" level=error msg="StopPodSandbox for \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\" failed" error="failed to destroy network for sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.354447 kubelet[1964]: E0710 00:47:37.354397 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:47:37.354536 kubelet[1964]: E0710 00:47:37.354464 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0"} Jul 10 00:47:37.354536 kubelet[1964]: E0710 00:47:37.354499 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dc95b02f-1623-40c8-ae17-bd260422ebf1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:37.354617 kubelet[1964]: E0710 00:47:37.354529 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dc95b02f-1623-40c8-ae17-bd260422ebf1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-bbc66c4f5-72mzq" podUID="dc95b02f-1623-40c8-ae17-bd260422ebf1" Jul 10 00:47:37.354982 env[1209]: time="2025-07-10T00:47:37.354934503Z" level=error msg="StopPodSandbox for \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\" failed" error="failed to destroy network for sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.355225 kubelet[1964]: E0710 00:47:37.355185 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:47:37.355225 kubelet[1964]: E0710 00:47:37.355218 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627"} Jul 10 00:47:37.355308 kubelet[1964]: E0710 00:47:37.355239 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"fad3c025-db1a-4fad-a522-ba2e599e52d0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:37.355308 kubelet[1964]: E0710 00:47:37.355257 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"fad3c025-db1a-4fad-a522-ba2e599e52d0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-c5stg" podUID="fad3c025-db1a-4fad-a522-ba2e599e52d0" Jul 10 00:47:37.364543 env[1209]: time="2025-07-10T00:47:37.364473719Z" level=error msg="StopPodSandbox for \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\" failed" error="failed to destroy network for sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:37.364650 kubelet[1964]: E0710 00:47:37.364625 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:47:37.364650 kubelet[1964]: E0710 00:47:37.364650 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175"} Jul 10 00:47:37.364745 kubelet[1964]: E0710 00:47:37.364668 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c52c6bb9-57dd-465e-a201-459c0e30980c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:37.364745 kubelet[1964]: E0710 00:47:37.364684 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c52c6bb9-57dd-465e-a201-459c0e30980c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-bbc66c4f5-7cmjp" podUID="c52c6bb9-57dd-465e-a201-459c0e30980c" Jul 10 00:47:38.236461 systemd[1]: Created slice kubepods-besteffort-pod5b03f62d_564c_468f_af64_90b8cb619060.slice. Jul 10 00:47:38.238178 env[1209]: time="2025-07-10T00:47:38.238143866Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-dwxds,Uid:5b03f62d-564c-468f-af64-90b8cb619060,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:38.288798 env[1209]: time="2025-07-10T00:47:38.288735814Z" level=error msg="Failed to destroy network for sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:38.289298 env[1209]: time="2025-07-10T00:47:38.289256601Z" level=error msg="encountered an error cleaning up failed sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:38.289586 env[1209]: time="2025-07-10T00:47:38.289304432Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-dwxds,Uid:5b03f62d-564c-468f-af64-90b8cb619060,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:38.289625 kubelet[1964]: E0710 00:47:38.289527 1964 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:38.289625 kubelet[1964]: E0710 00:47:38.289580 1964 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-dwxds" Jul 10 00:47:38.289625 kubelet[1964]: E0710 00:47:38.289607 1964 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-dwxds" Jul 10 00:47:38.289909 kubelet[1964]: E0710 00:47:38.289651 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-dwxds_calico-system(5b03f62d-564c-468f-af64-90b8cb619060)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-dwxds_calico-system(5b03f62d-564c-468f-af64-90b8cb619060)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-dwxds" podUID="5b03f62d-564c-468f-af64-90b8cb619060" Jul 10 00:47:38.291024 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada-shm.mount: Deactivated successfully. Jul 10 00:47:38.303601 kubelet[1964]: I0710 00:47:38.303572 1964 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:47:38.304977 env[1209]: time="2025-07-10T00:47:38.304163228Z" level=info msg="StopPodSandbox for \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\"" Jul 10 00:47:38.326548 env[1209]: time="2025-07-10T00:47:38.326481591Z" level=error msg="StopPodSandbox for \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\" failed" error="failed to destroy network for sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:47:38.326702 kubelet[1964]: E0710 00:47:38.326662 1964 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:47:38.326749 kubelet[1964]: E0710 00:47:38.326709 1964 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada"} Jul 10 00:47:38.326749 kubelet[1964]: E0710 00:47:38.326741 1964 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5b03f62d-564c-468f-af64-90b8cb619060\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:47:38.326843 kubelet[1964]: E0710 00:47:38.326764 1964 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5b03f62d-564c-468f-af64-90b8cb619060\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-dwxds" podUID="5b03f62d-564c-468f-af64-90b8cb619060" Jul 10 00:47:43.058498 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3508463421.mount: Deactivated successfully. Jul 10 00:47:44.087903 env[1209]: time="2025-07-10T00:47:44.087837232Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:44.090174 env[1209]: time="2025-07-10T00:47:44.090139771Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:44.092514 env[1209]: time="2025-07-10T00:47:44.092475402Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:44.093973 env[1209]: time="2025-07-10T00:47:44.093943971Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:44.094322 env[1209]: time="2025-07-10T00:47:44.094264727Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 10 00:47:44.106842 env[1209]: time="2025-07-10T00:47:44.106804693Z" level=info msg="CreateContainer within sandbox \"e3ec43a56db9f72d540528fafbb92f90b675adcdb7e0ff1528e350777f5d8d17\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 10 00:47:44.122539 env[1209]: time="2025-07-10T00:47:44.122489529Z" level=info msg="CreateContainer within sandbox \"e3ec43a56db9f72d540528fafbb92f90b675adcdb7e0ff1528e350777f5d8d17\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"a2d2a537ebd31c891c4376d7dcd58cf20eba5de9453633944619b23ccf8dd4e2\"" Jul 10 00:47:44.122920 env[1209]: time="2025-07-10T00:47:44.122897943Z" level=info msg="StartContainer for \"a2d2a537ebd31c891c4376d7dcd58cf20eba5de9453633944619b23ccf8dd4e2\"" Jul 10 00:47:44.142143 systemd[1]: Started cri-containerd-a2d2a537ebd31c891c4376d7dcd58cf20eba5de9453633944619b23ccf8dd4e2.scope. Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.160842 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 10 00:47:44.160967 kernel: audit: type=1400 audit(1752108464.159:990): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f95e264ff38 items=0 ppid=2473 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.168452 kernel: audit: type=1300 audit(1752108464.159:990): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f95e264ff38 items=0 ppid=2473 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.168528 kernel: audit: type=1327 audit(1752108464.159:990): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643261353337656264333163383931633433373664376463643538 Jul 10 00:47:44.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643261353337656264333163383931633433373664376463643538 Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.177054 kernel: audit: type=1400 audit(1752108464.159:991): avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.177168 kernel: audit: type=1400 audit(1752108464.159:991): avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.183047 kernel: audit: type=1400 audit(1752108464.159:991): avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.185956 kernel: audit: type=1400 audit(1752108464.159:991): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.188952 kernel: audit: type=1400 audit(1752108464.159:991): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.192175 kernel: audit: type=1400 audit(1752108464.159:991): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.195066 kernel: audit: type=1400 audit(1752108464.159:991): avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.159000 audit: BPF prog-id=133 op=LOAD Jul 10 00:47:44.159000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0002b37d8 items=0 ppid=2473 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643261353337656264333163383931633433373664376463643538 Jul 10 00:47:44.163000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.163000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.163000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.163000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.163000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.163000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.163000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.163000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.163000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.163000 audit: BPF prog-id=134 op=LOAD Jul 10 00:47:44.163000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0002b3828 items=0 ppid=2473 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.163000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643261353337656264333163383931633433373664376463643538 Jul 10 00:47:44.168000 audit: BPF prog-id=134 op=UNLOAD Jul 10 00:47:44.168000 audit: BPF prog-id=133 op=UNLOAD Jul 10 00:47:44.168000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.168000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.168000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.168000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.168000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.168000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.168000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.168000 audit[3205]: AVC avc: denied { perfmon } for pid=3205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.168000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.168000 audit[3205]: AVC avc: denied { bpf } for pid=3205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:44.168000 audit: BPF prog-id=135 op=LOAD Jul 10 00:47:44.168000 audit[3205]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0002b38b8 items=0 ppid=2473 pid=3205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.168000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132643261353337656264333163383931633433373664376463643538 Jul 10 00:47:44.292847 env[1209]: time="2025-07-10T00:47:44.292782297Z" level=info msg="StartContainer for \"a2d2a537ebd31c891c4376d7dcd58cf20eba5de9453633944619b23ccf8dd4e2\" returns successfully" Jul 10 00:47:44.328251 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 10 00:47:44.328484 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 10 00:47:44.329770 kubelet[1964]: I0710 00:47:44.329697 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-h2t4d" podStartSLOduration=0.956874566 podStartE2EDuration="18.329682099s" podCreationTimestamp="2025-07-10 00:47:26 +0000 UTC" firstStartedPulling="2025-07-10 00:47:26.722339725 +0000 UTC m=+16.576232184" lastFinishedPulling="2025-07-10 00:47:44.095147258 +0000 UTC m=+33.949039717" observedRunningTime="2025-07-10 00:47:44.328046352 +0000 UTC m=+34.181938811" watchObservedRunningTime="2025-07-10 00:47:44.329682099 +0000 UTC m=+34.183574558" Jul 10 00:47:44.415225 env[1209]: time="2025-07-10T00:47:44.415116632Z" level=info msg="StopPodSandbox for \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\"" Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.507 [INFO][3285] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.507 [INFO][3285] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" iface="eth0" netns="/var/run/netns/cni-4c40176b-5c10-3ac2-63c0-f4300cf91793" Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.507 [INFO][3285] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" iface="eth0" netns="/var/run/netns/cni-4c40176b-5c10-3ac2-63c0-f4300cf91793" Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.508 [INFO][3285] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" iface="eth0" netns="/var/run/netns/cni-4c40176b-5c10-3ac2-63c0-f4300cf91793" Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.508 [INFO][3285] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.508 [INFO][3285] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.562 [INFO][3294] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" HandleID="k8s-pod-network.0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Workload="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.563 [INFO][3294] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.563 [INFO][3294] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.568 [WARNING][3294] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" HandleID="k8s-pod-network.0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Workload="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.568 [INFO][3294] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" HandleID="k8s-pod-network.0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Workload="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.569 [INFO][3294] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:44.572781 env[1209]: 2025-07-10 00:47:44.571 [INFO][3285] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:47:44.573291 env[1209]: time="2025-07-10T00:47:44.572895074Z" level=info msg="TearDown network for sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\" successfully" Jul 10 00:47:44.573291 env[1209]: time="2025-07-10T00:47:44.572924890Z" level=info msg="StopPodSandbox for \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\" returns successfully" Jul 10 00:47:44.645589 kubelet[1964]: I0710 00:47:44.645549 1964 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-sznt4\" (UniqueName: \"kubernetes.io/projected/737fd0bf-a61e-49c6-80d2-cab480161f57-kube-api-access-sznt4\") pod \"737fd0bf-a61e-49c6-80d2-cab480161f57\" (UID: \"737fd0bf-a61e-49c6-80d2-cab480161f57\") " Jul 10 00:47:44.645730 kubelet[1964]: I0710 00:47:44.645597 1964 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/737fd0bf-a61e-49c6-80d2-cab480161f57-whisker-ca-bundle\") pod \"737fd0bf-a61e-49c6-80d2-cab480161f57\" (UID: \"737fd0bf-a61e-49c6-80d2-cab480161f57\") " Jul 10 00:47:44.645730 kubelet[1964]: I0710 00:47:44.645619 1964 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/737fd0bf-a61e-49c6-80d2-cab480161f57-whisker-backend-key-pair\") pod \"737fd0bf-a61e-49c6-80d2-cab480161f57\" (UID: \"737fd0bf-a61e-49c6-80d2-cab480161f57\") " Jul 10 00:47:44.646421 kubelet[1964]: I0710 00:47:44.646367 1964 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/737fd0bf-a61e-49c6-80d2-cab480161f57-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "737fd0bf-a61e-49c6-80d2-cab480161f57" (UID: "737fd0bf-a61e-49c6-80d2-cab480161f57"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 10 00:47:44.648848 kubelet[1964]: I0710 00:47:44.648815 1964 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/737fd0bf-a61e-49c6-80d2-cab480161f57-kube-api-access-sznt4" (OuterVolumeSpecName: "kube-api-access-sznt4") pod "737fd0bf-a61e-49c6-80d2-cab480161f57" (UID: "737fd0bf-a61e-49c6-80d2-cab480161f57"). InnerVolumeSpecName "kube-api-access-sznt4". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 10 00:47:44.649048 kubelet[1964]: I0710 00:47:44.648996 1964 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/737fd0bf-a61e-49c6-80d2-cab480161f57-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "737fd0bf-a61e-49c6-80d2-cab480161f57" (UID: "737fd0bf-a61e-49c6-80d2-cab480161f57"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 10 00:47:44.746881 kubelet[1964]: I0710 00:47:44.746830 1964 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-sznt4\" (UniqueName: \"kubernetes.io/projected/737fd0bf-a61e-49c6-80d2-cab480161f57-kube-api-access-sznt4\") on node \"localhost\" DevicePath \"\"" Jul 10 00:47:44.746881 kubelet[1964]: I0710 00:47:44.746860 1964 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/737fd0bf-a61e-49c6-80d2-cab480161f57-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 10 00:47:44.746881 kubelet[1964]: I0710 00:47:44.746867 1964 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/737fd0bf-a61e-49c6-80d2-cab480161f57-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 10 00:47:44.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.138:22-10.0.0.1:39490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:44.906255 systemd[1]: Started sshd@7-10.0.0.138:22-10.0.0.1:39490.service. Jul 10 00:47:44.939000 audit[3315]: USER_ACCT pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:44.940680 sshd[3315]: Accepted publickey for core from 10.0.0.1 port 39490 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:47:44.940000 audit[3315]: CRED_ACQ pid=3315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:44.940000 audit[3315]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0fed2690 a2=3 a3=0 items=0 ppid=1 pid=3315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:44.940000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:47:44.941399 sshd[3315]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:47:44.944838 systemd-logind[1196]: New session 8 of user core. Jul 10 00:47:44.945633 systemd[1]: Started session-8.scope. Jul 10 00:47:44.948000 audit[3315]: USER_START pid=3315 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:44.949000 audit[3317]: CRED_ACQ pid=3317 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:45.056008 sshd[3315]: pam_unix(sshd:session): session closed for user core Jul 10 00:47:45.056000 audit[3315]: USER_END pid=3315 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:45.056000 audit[3315]: CRED_DISP pid=3315 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:45.058818 systemd[1]: sshd@7-10.0.0.138:22-10.0.0.1:39490.service: Deactivated successfully. Jul 10 00:47:45.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.138:22-10.0.0.1:39490 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:45.059540 systemd[1]: session-8.scope: Deactivated successfully. Jul 10 00:47:45.060009 systemd-logind[1196]: Session 8 logged out. Waiting for processes to exit. Jul 10 00:47:45.060764 systemd-logind[1196]: Removed session 8. Jul 10 00:47:45.100084 systemd[1]: run-netns-cni\x2d4c40176b\x2d5c10\x2d3ac2\x2d63c0\x2df4300cf91793.mount: Deactivated successfully. Jul 10 00:47:45.100168 systemd[1]: var-lib-kubelet-pods-737fd0bf\x2da61e\x2d49c6\x2d80d2\x2dcab480161f57-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dsznt4.mount: Deactivated successfully. Jul 10 00:47:45.100229 systemd[1]: var-lib-kubelet-pods-737fd0bf\x2da61e\x2d49c6\x2d80d2\x2dcab480161f57-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 10 00:47:45.320812 systemd[1]: Removed slice kubepods-besteffort-pod737fd0bf_a61e_49c6_80d2_cab480161f57.slice. Jul 10 00:47:45.365867 systemd[1]: Created slice kubepods-besteffort-pod152ccd37_1fff_4c18_af2e_59ec426f087c.slice. Jul 10 00:47:45.452296 kubelet[1964]: I0710 00:47:45.452256 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4kr7p\" (UniqueName: \"kubernetes.io/projected/152ccd37-1fff-4c18-af2e-59ec426f087c-kube-api-access-4kr7p\") pod \"whisker-5fd7d9cdd-652lv\" (UID: \"152ccd37-1fff-4c18-af2e-59ec426f087c\") " pod="calico-system/whisker-5fd7d9cdd-652lv" Jul 10 00:47:45.452703 kubelet[1964]: I0710 00:47:45.452317 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/152ccd37-1fff-4c18-af2e-59ec426f087c-whisker-backend-key-pair\") pod \"whisker-5fd7d9cdd-652lv\" (UID: \"152ccd37-1fff-4c18-af2e-59ec426f087c\") " pod="calico-system/whisker-5fd7d9cdd-652lv" Jul 10 00:47:45.452703 kubelet[1964]: I0710 00:47:45.452340 1964 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/152ccd37-1fff-4c18-af2e-59ec426f087c-whisker-ca-bundle\") pod \"whisker-5fd7d9cdd-652lv\" (UID: \"152ccd37-1fff-4c18-af2e-59ec426f087c\") " pod="calico-system/whisker-5fd7d9cdd-652lv" Jul 10 00:47:45.669774 env[1209]: time="2025-07-10T00:47:45.669640215Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5fd7d9cdd-652lv,Uid:152ccd37-1fff-4c18-af2e-59ec426f087c,Namespace:calico-system,Attempt:0,}" Jul 10 00:47:45.721000 audit[3402]: AVC avc: denied { write } for pid=3402 comm="tee" name="fd" dev="proc" ino=24072 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:47:45.721000 audit[3402]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff58b957ee a2=241 a3=1b6 items=1 ppid=3379 pid=3402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.721000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 10 00:47:45.721000 audit: PATH item=0 name="/dev/fd/63" inode=23476 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:47:45.721000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:47:45.727000 audit[3428]: AVC avc: denied { write } for pid=3428 comm="tee" name="fd" dev="proc" ino=23491 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:47:45.727000 audit[3428]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff22e967de a2=241 a3=1b6 items=1 ppid=3382 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.727000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 10 00:47:45.727000 audit: PATH item=0 name="/dev/fd/63" inode=23485 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:47:45.727000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:47:45.747000 audit[3447]: AVC avc: denied { write } for pid=3447 comm="tee" name="fd" dev="proc" ino=26014 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:47:45.747000 audit[3447]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffde33267dd a2=241 a3=1b6 items=1 ppid=3401 pid=3447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.747000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 10 00:47:45.747000 audit: PATH item=0 name="/dev/fd/63" inode=24078 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:47:45.747000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:47:45.748000 audit[3456]: AVC avc: denied { write } for pid=3456 comm="tee" name="fd" dev="proc" ino=26018 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:47:45.748000 audit[3456]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe1d9297ed a2=241 a3=1b6 items=1 ppid=3378 pid=3456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.748000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 10 00:47:45.748000 audit: PATH item=0 name="/dev/fd/63" inode=25170 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:47:45.748000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:47:45.749000 audit[3454]: AVC avc: denied { write } for pid=3454 comm="tee" name="fd" dev="proc" ino=26022 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:47:45.749000 audit[3454]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc2bca37ed a2=241 a3=1b6 items=1 ppid=3394 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.749000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 10 00:47:45.749000 audit: PATH item=0 name="/dev/fd/63" inode=23497 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:47:45.749000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:47:45.755000 audit[3411]: AVC avc: denied { write } for pid=3411 comm="tee" name="fd" dev="proc" ino=25173 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:47:45.755000 audit[3411]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffee9a1a7ef a2=241 a3=1b6 items=1 ppid=3383 pid=3411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.755000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 10 00:47:45.755000 audit: PATH item=0 name="/dev/fd/63" inode=24067 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:47:45.755000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:47:45.791000 audit[3466]: AVC avc: denied { write } for pid=3466 comm="tee" name="fd" dev="proc" ino=25177 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:47:45.791000 audit[3466]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe160c97ed a2=241 a3=1b6 items=1 ppid=3385 pid=3466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.791000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 10 00:47:45.791000 audit: PATH item=0 name="/dev/fd/63" inode=24083 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:47:45.791000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:47:45.840281 systemd-networkd[1029]: calie847e90aba8: Link UP Jul 10 00:47:45.844780 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:47:45.844909 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie847e90aba8: link becomes ready Jul 10 00:47:45.845073 systemd-networkd[1029]: calie847e90aba8: Gained carrier Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.699 [INFO][3355] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.716 [INFO][3355] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--5fd7d9cdd--652lv-eth0 whisker-5fd7d9cdd- calico-system 152ccd37-1fff-4c18-af2e-59ec426f087c 993 0 2025-07-10 00:47:45 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5fd7d9cdd projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-5fd7d9cdd-652lv eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calie847e90aba8 [] [] }} ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Namespace="calico-system" Pod="whisker-5fd7d9cdd-652lv" WorkloadEndpoint="localhost-k8s-whisker--5fd7d9cdd--652lv-" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.716 [INFO][3355] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Namespace="calico-system" Pod="whisker-5fd7d9cdd-652lv" WorkloadEndpoint="localhost-k8s-whisker--5fd7d9cdd--652lv-eth0" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.775 [INFO][3430] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" HandleID="k8s-pod-network.b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Workload="localhost-k8s-whisker--5fd7d9cdd--652lv-eth0" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.778 [INFO][3430] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" HandleID="k8s-pod-network.b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Workload="localhost-k8s-whisker--5fd7d9cdd--652lv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004f730), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-5fd7d9cdd-652lv", "timestamp":"2025-07-10 00:47:45.775518724 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.778 [INFO][3430] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.778 [INFO][3430] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.778 [INFO][3430] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.785 [INFO][3430] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" host="localhost" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.798 [INFO][3430] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.812 [INFO][3430] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.814 [INFO][3430] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.816 [INFO][3430] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.816 [INFO][3430] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" host="localhost" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.817 [INFO][3430] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9 Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.821 [INFO][3430] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" host="localhost" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.826 [INFO][3430] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" host="localhost" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.826 [INFO][3430] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" host="localhost" Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.826 [INFO][3430] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:45.865284 env[1209]: 2025-07-10 00:47:45.826 [INFO][3430] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" HandleID="k8s-pod-network.b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Workload="localhost-k8s-whisker--5fd7d9cdd--652lv-eth0" Jul 10 00:47:45.865926 env[1209]: 2025-07-10 00:47:45.829 [INFO][3355] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Namespace="calico-system" Pod="whisker-5fd7d9cdd-652lv" WorkloadEndpoint="localhost-k8s-whisker--5fd7d9cdd--652lv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5fd7d9cdd--652lv-eth0", GenerateName:"whisker-5fd7d9cdd-", Namespace:"calico-system", SelfLink:"", UID:"152ccd37-1fff-4c18-af2e-59ec426f087c", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5fd7d9cdd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-5fd7d9cdd-652lv", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calie847e90aba8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:45.865926 env[1209]: 2025-07-10 00:47:45.829 [INFO][3355] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Namespace="calico-system" Pod="whisker-5fd7d9cdd-652lv" WorkloadEndpoint="localhost-k8s-whisker--5fd7d9cdd--652lv-eth0" Jul 10 00:47:45.865926 env[1209]: 2025-07-10 00:47:45.829 [INFO][3355] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie847e90aba8 ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Namespace="calico-system" Pod="whisker-5fd7d9cdd-652lv" WorkloadEndpoint="localhost-k8s-whisker--5fd7d9cdd--652lv-eth0" Jul 10 00:47:45.865926 env[1209]: 2025-07-10 00:47:45.844 [INFO][3355] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Namespace="calico-system" Pod="whisker-5fd7d9cdd-652lv" WorkloadEndpoint="localhost-k8s-whisker--5fd7d9cdd--652lv-eth0" Jul 10 00:47:45.865926 env[1209]: 2025-07-10 00:47:45.845 [INFO][3355] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Namespace="calico-system" Pod="whisker-5fd7d9cdd-652lv" WorkloadEndpoint="localhost-k8s-whisker--5fd7d9cdd--652lv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5fd7d9cdd--652lv-eth0", GenerateName:"whisker-5fd7d9cdd-", Namespace:"calico-system", SelfLink:"", UID:"152ccd37-1fff-4c18-af2e-59ec426f087c", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5fd7d9cdd", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9", Pod:"whisker-5fd7d9cdd-652lv", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calie847e90aba8", MAC:"6e:21:95:0c:66:7d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:45.865926 env[1209]: 2025-07-10 00:47:45.862 [INFO][3355] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9" Namespace="calico-system" Pod="whisker-5fd7d9cdd-652lv" WorkloadEndpoint="localhost-k8s-whisker--5fd7d9cdd--652lv-eth0" Jul 10 00:47:45.885154 env[1209]: time="2025-07-10T00:47:45.884934917Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:45.886074 env[1209]: time="2025-07-10T00:47:45.886003820Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:45.886205 env[1209]: time="2025-07-10T00:47:45.886180714Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:45.886664 env[1209]: time="2025-07-10T00:47:45.886590811Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9 pid=3490 runtime=io.containerd.runc.v2 Jul 10 00:47:45.897186 systemd[1]: Started cri-containerd-b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9.scope. Jul 10 00:47:45.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit: BPF prog-id=136 op=LOAD Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3490 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234333731336234653239363865653864623761396436396562373166 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3490 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234333731336234653239363865653864623761396436396562373166 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.917000 audit: BPF prog-id=137 op=LOAD Jul 10 00:47:45.917000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000388350 items=0 ppid=3490 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.917000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234333731336234653239363865653864623761396436396562373166 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit: BPF prog-id=138 op=LOAD Jul 10 00:47:45.918000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000388398 items=0 ppid=3490 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234333731336234653239363865653864623761396436396562373166 Jul 10 00:47:45.918000 audit: BPF prog-id=138 op=UNLOAD Jul 10 00:47:45.918000 audit: BPF prog-id=137 op=UNLOAD Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { perfmon } for pid=3501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit[3501]: AVC avc: denied { bpf } for pid=3501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.918000 audit: BPF prog-id=139 op=LOAD Jul 10 00:47:45.918000 audit[3501]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003887a8 items=0 ppid=3490 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.918000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234333731336234653239363865653864623761396436396562373166 Jul 10 00:47:45.919417 systemd-resolved[1149]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit: BPF prog-id=140 op=LOAD Jul 10 00:47:45.939000 audit[3553]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffedce03870 a2=98 a3=1fffffffffffffff items=0 ppid=3388 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.939000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:47:45.939000 audit: BPF prog-id=140 op=UNLOAD Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit: BPF prog-id=141 op=LOAD Jul 10 00:47:45.939000 audit[3553]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffedce03750 a2=94 a3=3 items=0 ppid=3388 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.939000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:47:45.939000 audit: BPF prog-id=141 op=UNLOAD Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { bpf } for pid=3553 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit: BPF prog-id=142 op=LOAD Jul 10 00:47:45.939000 audit[3553]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffedce03790 a2=94 a3=7ffedce03970 items=0 ppid=3388 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.939000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:47:45.939000 audit: BPF prog-id=142 op=UNLOAD Jul 10 00:47:45.939000 audit[3553]: AVC avc: denied { perfmon } for pid=3553 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.939000 audit[3553]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffedce03860 a2=50 a3=a000000085 items=0 ppid=3388 pid=3553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.939000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit: BPF prog-id=143 op=LOAD Jul 10 00:47:45.941000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff58de9840 a2=98 a3=3 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.941000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:45.941000 audit: BPF prog-id=143 op=UNLOAD Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit: BPF prog-id=144 op=LOAD Jul 10 00:47:45.941000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff58de9630 a2=94 a3=54428f items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.941000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:45.941000 audit: BPF prog-id=144 op=UNLOAD Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:45.941000 audit: BPF prog-id=145 op=LOAD Jul 10 00:47:45.941000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff58de9660 a2=94 a3=2 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:45.941000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:45.941000 audit: BPF prog-id=145 op=UNLOAD Jul 10 00:47:45.944487 env[1209]: time="2025-07-10T00:47:45.944431089Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5fd7d9cdd-652lv,Uid:152ccd37-1fff-4c18-af2e-59ec426f087c,Namespace:calico-system,Attempt:0,} returns sandbox id \"b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9\"" Jul 10 00:47:45.946643 env[1209]: time="2025-07-10T00:47:45.946622987Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 10 00:47:46.047000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.047000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.047000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.047000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.047000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.047000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.047000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.047000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.047000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.047000 audit: BPF prog-id=146 op=LOAD Jul 10 00:47:46.047000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff58de9520 a2=94 a3=1 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.047000 audit: BPF prog-id=146 op=UNLOAD Jul 10 00:47:46.047000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.047000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff58de95f0 a2=50 a3=7fff58de96d0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.047000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff58de9530 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff58de9560 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff58de9470 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff58de9580 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff58de9560 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff58de9550 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff58de9580 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff58de9560 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff58de9580 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff58de9550 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff58de95c0 a2=28 a3=0 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff58de9370 a2=50 a3=1 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.055000 audit: BPF prog-id=147 op=LOAD Jul 10 00:47:46.055000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff58de9370 a2=94 a3=5 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.055000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.056000 audit: BPF prog-id=147 op=UNLOAD Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff58de9420 a2=50 a3=1 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.056000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff58de9540 a2=4 a3=38 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.056000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { confidentiality } for pid=3554 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:47:46.056000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff58de9590 a2=94 a3=6 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.056000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { confidentiality } for pid=3554 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:47:46.056000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff58de8d40 a2=94 a3=88 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.056000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { perfmon } for pid=3554 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { bpf } for pid=3554 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.056000 audit[3554]: AVC avc: denied { confidentiality } for pid=3554 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:47:46.056000 audit[3554]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff58de8d40 a2=94 a3=88 items=0 ppid=3388 pid=3554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.056000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit: BPF prog-id=148 op=LOAD Jul 10 00:47:46.065000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe7f5687f0 a2=98 a3=1999999999999999 items=0 ppid=3388 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.065000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:47:46.065000 audit: BPF prog-id=148 op=UNLOAD Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit: BPF prog-id=149 op=LOAD Jul 10 00:47:46.065000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe7f5686d0 a2=94 a3=ffff items=0 ppid=3388 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.065000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:47:46.065000 audit: BPF prog-id=149 op=UNLOAD Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.065000 audit: BPF prog-id=150 op=LOAD Jul 10 00:47:46.065000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe7f568710 a2=94 a3=7ffe7f5688f0 items=0 ppid=3388 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.065000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:47:46.065000 audit: BPF prog-id=150 op=UNLOAD Jul 10 00:47:46.123486 systemd-networkd[1029]: vxlan.calico: Link UP Jul 10 00:47:46.123497 systemd-networkd[1029]: vxlan.calico: Gained carrier Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit: BPF prog-id=151 op=LOAD Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc77653880 a2=98 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.134000 audit: BPF prog-id=151 op=UNLOAD Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit: BPF prog-id=152 op=LOAD Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc77653690 a2=94 a3=54428f items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.134000 audit: BPF prog-id=152 op=UNLOAD Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit: BPF prog-id=153 op=LOAD Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc776536c0 a2=94 a3=2 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.134000 audit: BPF prog-id=153 op=UNLOAD Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc77653590 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc776535c0 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc776534d0 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc776535e0 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc776535c0 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc776535b0 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc776535e0 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.134000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.134000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc776535c0 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.134000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc776535e0 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.135000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc776535b0 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.135000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc77653620 a2=28 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.135000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit: BPF prog-id=154 op=LOAD Jul 10 00:47:46.135000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc77653490 a2=94 a3=0 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.135000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.135000 audit: BPF prog-id=154 op=UNLOAD Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffc77653480 a2=50 a3=2800 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.135000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffc77653480 a2=50 a3=2800 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.135000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit: BPF prog-id=155 op=LOAD Jul 10 00:47:46.135000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc77652ca0 a2=94 a3=2 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.135000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.135000 audit: BPF prog-id=155 op=UNLOAD Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { perfmon } for pid=3583 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit[3583]: AVC avc: denied { bpf } for pid=3583 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.135000 audit: BPF prog-id=156 op=LOAD Jul 10 00:47:46.135000 audit[3583]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc77652da0 a2=94 a3=30 items=0 ppid=3388 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.135000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit: BPF prog-id=157 op=LOAD Jul 10 00:47:46.143000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd939a6550 a2=98 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.143000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.143000 audit: BPF prog-id=157 op=UNLOAD Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit: BPF prog-id=158 op=LOAD Jul 10 00:47:46.143000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd939a6340 a2=94 a3=54428f items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.143000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.143000 audit: BPF prog-id=158 op=UNLOAD Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.143000 audit: BPF prog-id=159 op=LOAD Jul 10 00:47:46.143000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd939a6370 a2=94 a3=2 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.143000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.143000 audit: BPF prog-id=159 op=UNLOAD Jul 10 00:47:46.233776 kubelet[1964]: I0710 00:47:46.233738 1964 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="737fd0bf-a61e-49c6-80d2-cab480161f57" path="/var/lib/kubelet/pods/737fd0bf-a61e-49c6-80d2-cab480161f57/volumes" Jul 10 00:47:46.248000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.248000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.248000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.248000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.248000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.248000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.248000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.248000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.248000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.248000 audit: BPF prog-id=160 op=LOAD Jul 10 00:47:46.248000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd939a6230 a2=94 a3=1 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.248000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.248000 audit: BPF prog-id=160 op=UNLOAD Jul 10 00:47:46.248000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.248000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd939a6300 a2=50 a3=7ffd939a63e0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.248000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd939a6240 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd939a6270 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd939a6180 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd939a6290 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd939a6270 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd939a6260 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd939a6290 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd939a6270 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd939a6290 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd939a6260 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd939a62d0 a2=28 a3=0 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd939a6080 a2=50 a3=1 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit: BPF prog-id=161 op=LOAD Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd939a6080 a2=94 a3=5 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit: BPF prog-id=161 op=UNLOAD Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd939a6130 a2=50 a3=1 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffd939a6250 a2=4 a3=38 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.256000 audit[3590]: AVC avc: denied { confidentiality } for pid=3590 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:47:46.256000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd939a62a0 a2=94 a3=6 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.256000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { confidentiality } for pid=3590 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:47:46.257000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd939a5a50 a2=94 a3=88 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.257000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { perfmon } for pid=3590 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { confidentiality } for pid=3590 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:47:46.257000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd939a5a50 a2=94 a3=88 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.257000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd939a7480 a2=10 a3=208 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.257000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd939a7320 a2=10 a3=3 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.257000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd939a72c0 a2=10 a3=3 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.257000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.257000 audit[3590]: AVC avc: denied { bpf } for pid=3590 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:46.257000 audit[3590]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd939a72c0 a2=10 a3=7 items=0 ppid=3388 pid=3590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.257000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:47:46.264000 audit: BPF prog-id=156 op=UNLOAD Jul 10 00:47:46.306000 audit[3615]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3615 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:46.306000 audit[3615]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffd25b09a60 a2=0 a3=7ffd25b09a4c items=0 ppid=3388 pid=3615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.306000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:46.313000 audit[3618]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3618 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:46.313000 audit[3618]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffcba53a8d0 a2=0 a3=7ffcba53a8bc items=0 ppid=3388 pid=3618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.313000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:46.315000 audit[3614]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3614 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:46.315000 audit[3614]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffecb3c1aa0 a2=0 a3=7ffecb3c1a8c items=0 ppid=3388 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.315000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:46.316000 audit[3617]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3617 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:46.316000 audit[3617]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffd2fd02780 a2=0 a3=7ffd2fd0276c items=0 ppid=3388 pid=3617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:46.316000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:46.981538 systemd-networkd[1029]: calie847e90aba8: Gained IPv6LL Jul 10 00:47:47.417088 env[1209]: time="2025-07-10T00:47:47.416976403Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:47.419366 env[1209]: time="2025-07-10T00:47:47.419326288Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:47.420855 env[1209]: time="2025-07-10T00:47:47.420832016Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:47.422432 env[1209]: time="2025-07-10T00:47:47.422387508Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:47.422898 env[1209]: time="2025-07-10T00:47:47.422864751Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 10 00:47:47.427204 env[1209]: time="2025-07-10T00:47:47.427176867Z" level=info msg="CreateContainer within sandbox \"b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 10 00:47:47.441304 env[1209]: time="2025-07-10T00:47:47.441267828Z" level=info msg="CreateContainer within sandbox \"b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"0405dce7d7cfb914e0398f171c7bfb73c36d188ad0dce2e3fe56c65ce89b95cc\"" Jul 10 00:47:47.441704 env[1209]: time="2025-07-10T00:47:47.441685238Z" level=info msg="StartContainer for \"0405dce7d7cfb914e0398f171c7bfb73c36d188ad0dce2e3fe56c65ce89b95cc\"" Jul 10 00:47:47.458635 systemd[1]: Started cri-containerd-0405dce7d7cfb914e0398f171c7bfb73c36d188ad0dce2e3fe56c65ce89b95cc.scope. Jul 10 00:47:47.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit: BPF prog-id=162 op=LOAD Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3490 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:47.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034303564636537643763666239313465303339386631373163376266 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3490 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:47.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034303564636537643763666239313465303339386631373163376266 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit: BPF prog-id=163 op=LOAD Jul 10 00:47:47.467000 audit[3638]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00009b0a0 items=0 ppid=3490 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:47.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034303564636537643763666239313465303339386631373163376266 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.467000 audit: BPF prog-id=164 op=LOAD Jul 10 00:47:47.467000 audit[3638]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00009b0e8 items=0 ppid=3490 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:47.467000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034303564636537643763666239313465303339386631373163376266 Jul 10 00:47:47.467000 audit: BPF prog-id=164 op=UNLOAD Jul 10 00:47:47.468000 audit: BPF prog-id=163 op=UNLOAD Jul 10 00:47:47.468000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.468000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.468000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.468000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.468000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.468000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.468000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.468000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.468000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.468000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:47.468000 audit: BPF prog-id=165 op=LOAD Jul 10 00:47:47.468000 audit[3638]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00009b4f8 items=0 ppid=3490 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:47.468000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034303564636537643763666239313465303339386631373163376266 Jul 10 00:47:47.498000 audit[3648]: AVC avc: denied { search } for pid=3648 comm="nginx" name="crypto" dev="proc" ino=24289 scontext=system_u:system_r:svirt_lxc_net_t:s0:c41,c1004 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 10 00:47:47.498000 audit[3648]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f198995c728 a2=0 a3=0 items=0 ppid=3490 pid=3648 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c41,c1004 key=(null) Jul 10 00:47:47.498000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 10 00:47:47.511581 env[1209]: time="2025-07-10T00:47:47.511529120Z" level=info msg="StartContainer for \"0405dce7d7cfb914e0398f171c7bfb73c36d188ad0dce2e3fe56c65ce89b95cc\" returns successfully" Jul 10 00:47:47.512546 env[1209]: time="2025-07-10T00:47:47.512487382Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 10 00:47:48.069524 systemd-networkd[1029]: vxlan.calico: Gained IPv6LL Jul 10 00:47:48.234305 env[1209]: time="2025-07-10T00:47:48.234257761Z" level=info msg="StopPodSandbox for \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\"" Jul 10 00:47:48.234535 env[1209]: time="2025-07-10T00:47:48.234297756Z" level=info msg="StopPodSandbox for \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\"" Jul 10 00:47:48.234685 env[1209]: time="2025-07-10T00:47:48.234273290Z" level=info msg="StopPodSandbox for \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\"" Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.288 [INFO][3703] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.288 [INFO][3703] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" iface="eth0" netns="/var/run/netns/cni-a464afc2-b757-fa31-f0a1-4a1162e799e3" Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.289 [INFO][3703] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" iface="eth0" netns="/var/run/netns/cni-a464afc2-b757-fa31-f0a1-4a1162e799e3" Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.289 [INFO][3703] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" iface="eth0" netns="/var/run/netns/cni-a464afc2-b757-fa31-f0a1-4a1162e799e3" Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.289 [INFO][3703] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.289 [INFO][3703] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.311 [INFO][3739] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" HandleID="k8s-pod-network.244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.311 [INFO][3739] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.311 [INFO][3739] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.316 [WARNING][3739] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" HandleID="k8s-pod-network.244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.316 [INFO][3739] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" HandleID="k8s-pod-network.244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.317 [INFO][3739] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:48.322170 env[1209]: 2025-07-10 00:47:48.319 [INFO][3703] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:47:48.323588 env[1209]: time="2025-07-10T00:47:48.323519715Z" level=info msg="TearDown network for sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\" successfully" Jul 10 00:47:48.323588 env[1209]: time="2025-07-10T00:47:48.323562026Z" level=info msg="StopPodSandbox for \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\" returns successfully" Jul 10 00:47:48.324687 systemd[1]: run-netns-cni\x2da464afc2\x2db757\x2dfa31\x2df0a1\x2d4a1162e799e3.mount: Deactivated successfully. Jul 10 00:47:48.326232 env[1209]: time="2025-07-10T00:47:48.326195465Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-2rwwm,Uid:44f4e572-f541-4255-a16c-ef3be90dc5fc,Namespace:calico-system,Attempt:1,}" Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.287 [INFO][3704] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.287 [INFO][3704] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" iface="eth0" netns="/var/run/netns/cni-b535d63e-57a4-4d53-01f7-8cb4b183c05f" Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.287 [INFO][3704] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" iface="eth0" netns="/var/run/netns/cni-b535d63e-57a4-4d53-01f7-8cb4b183c05f" Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.287 [INFO][3704] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" iface="eth0" netns="/var/run/netns/cni-b535d63e-57a4-4d53-01f7-8cb4b183c05f" Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.287 [INFO][3704] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.287 [INFO][3704] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.312 [INFO][3733] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" HandleID="k8s-pod-network.da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.312 [INFO][3733] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.317 [INFO][3733] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.321 [WARNING][3733] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" HandleID="k8s-pod-network.da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.322 [INFO][3733] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" HandleID="k8s-pod-network.da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.324 [INFO][3733] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:48.327327 env[1209]: 2025-07-10 00:47:48.325 [INFO][3704] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:47:48.327805 env[1209]: time="2025-07-10T00:47:48.327542703Z" level=info msg="TearDown network for sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\" successfully" Jul 10 00:47:48.327805 env[1209]: time="2025-07-10T00:47:48.327562841Z" level=info msg="StopPodSandbox for \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\" returns successfully" Jul 10 00:47:48.327950 kubelet[1964]: E0710 00:47:48.327752 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:48.328538 env[1209]: time="2025-07-10T00:47:48.328515282Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-89d2r,Uid:7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9,Namespace:kube-system,Attempt:1,}" Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.282 [INFO][3705] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.282 [INFO][3705] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" iface="eth0" netns="/var/run/netns/cni-ccd74dc9-d245-828e-5887-bb36df61c160" Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.282 [INFO][3705] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" iface="eth0" netns="/var/run/netns/cni-ccd74dc9-d245-828e-5887-bb36df61c160" Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.282 [INFO][3705] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" iface="eth0" netns="/var/run/netns/cni-ccd74dc9-d245-828e-5887-bb36df61c160" Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.283 [INFO][3705] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.283 [INFO][3705] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.316 [INFO][3727] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" HandleID="k8s-pod-network.e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.316 [INFO][3727] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.324 [INFO][3727] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.330 [WARNING][3727] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" HandleID="k8s-pod-network.e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.330 [INFO][3727] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" HandleID="k8s-pod-network.e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.332 [INFO][3727] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:48.335885 env[1209]: 2025-07-10 00:47:48.334 [INFO][3705] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:47:48.336314 env[1209]: time="2025-07-10T00:47:48.335998283Z" level=info msg="TearDown network for sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\" successfully" Jul 10 00:47:48.336314 env[1209]: time="2025-07-10T00:47:48.336028179Z" level=info msg="StopPodSandbox for \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\" returns successfully" Jul 10 00:47:48.336597 env[1209]: time="2025-07-10T00:47:48.336573380Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6fb9d69dc5-lhdbl,Uid:7971856c-7069-4d9d-9ccc-de726a8a0019,Namespace:calico-system,Attempt:1,}" Jul 10 00:47:48.439958 systemd[1]: run-netns-cni\x2db535d63e\x2d57a4\x2d4d53\x2d01f7\x2d8cb4b183c05f.mount: Deactivated successfully. Jul 10 00:47:48.440042 systemd[1]: run-netns-cni\x2dccd74dc9\x2dd245\x2d828e\x2d5887\x2dbb36df61c160.mount: Deactivated successfully. Jul 10 00:47:48.452298 systemd-networkd[1029]: cali94093fb3f47: Link UP Jul 10 00:47:48.456010 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:47:48.456226 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali94093fb3f47: link becomes ready Jul 10 00:47:48.456121 systemd-networkd[1029]: cali94093fb3f47: Gained carrier Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.394 [INFO][3777] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0 calico-kube-controllers-6fb9d69dc5- calico-system 7971856c-7069-4d9d-9ccc-de726a8a0019 1014 0 2025-07-10 00:47:26 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6fb9d69dc5 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-6fb9d69dc5-lhdbl eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali94093fb3f47 [] [] }} ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Namespace="calico-system" Pod="calico-kube-controllers-6fb9d69dc5-lhdbl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.394 [INFO][3777] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Namespace="calico-system" Pod="calico-kube-controllers-6fb9d69dc5-lhdbl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.415 [INFO][3811] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" HandleID="k8s-pod-network.63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.416 [INFO][3811] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" HandleID="k8s-pod-network.63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001a4e70), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-6fb9d69dc5-lhdbl", "timestamp":"2025-07-10 00:47:48.415941966 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.416 [INFO][3811] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.416 [INFO][3811] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.416 [INFO][3811] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.424 [INFO][3811] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" host="localhost" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.427 [INFO][3811] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.431 [INFO][3811] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.432 [INFO][3811] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.433 [INFO][3811] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.433 [INFO][3811] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" host="localhost" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.435 [INFO][3811] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.441 [INFO][3811] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" host="localhost" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.445 [INFO][3811] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" host="localhost" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.445 [INFO][3811] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" host="localhost" Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.446 [INFO][3811] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:48.466299 env[1209]: 2025-07-10 00:47:48.446 [INFO][3811] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" HandleID="k8s-pod-network.63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:47:48.467252 env[1209]: 2025-07-10 00:47:48.448 [INFO][3777] cni-plugin/k8s.go 418: Populated endpoint ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Namespace="calico-system" Pod="calico-kube-controllers-6fb9d69dc5-lhdbl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0", GenerateName:"calico-kube-controllers-6fb9d69dc5-", Namespace:"calico-system", SelfLink:"", UID:"7971856c-7069-4d9d-9ccc-de726a8a0019", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6fb9d69dc5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-6fb9d69dc5-lhdbl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali94093fb3f47", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:48.467252 env[1209]: 2025-07-10 00:47:48.449 [INFO][3777] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Namespace="calico-system" Pod="calico-kube-controllers-6fb9d69dc5-lhdbl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:47:48.467252 env[1209]: 2025-07-10 00:47:48.449 [INFO][3777] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali94093fb3f47 ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Namespace="calico-system" Pod="calico-kube-controllers-6fb9d69dc5-lhdbl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:47:48.467252 env[1209]: 2025-07-10 00:47:48.456 [INFO][3777] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Namespace="calico-system" Pod="calico-kube-controllers-6fb9d69dc5-lhdbl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:47:48.467252 env[1209]: 2025-07-10 00:47:48.457 [INFO][3777] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Namespace="calico-system" Pod="calico-kube-controllers-6fb9d69dc5-lhdbl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0", GenerateName:"calico-kube-controllers-6fb9d69dc5-", Namespace:"calico-system", SelfLink:"", UID:"7971856c-7069-4d9d-9ccc-de726a8a0019", ResourceVersion:"1014", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6fb9d69dc5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb", Pod:"calico-kube-controllers-6fb9d69dc5-lhdbl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali94093fb3f47", MAC:"8e:b6:aa:b1:82:db", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:48.467252 env[1209]: 2025-07-10 00:47:48.464 [INFO][3777] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb" Namespace="calico-system" Pod="calico-kube-controllers-6fb9d69dc5-lhdbl" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:47:48.473000 audit[3832]: NETFILTER_CFG table=filter:105 family=2 entries=36 op=nft_register_chain pid=3832 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:48.473000 audit[3832]: SYSCALL arch=c000003e syscall=46 success=yes exit=19576 a0=3 a1=7ffd9a608840 a2=0 a3=7ffd9a60882c items=0 ppid=3388 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.473000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:48.476743 env[1209]: time="2025-07-10T00:47:48.476676856Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:48.476907 env[1209]: time="2025-07-10T00:47:48.476743602Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:48.476907 env[1209]: time="2025-07-10T00:47:48.476774580Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:48.477023 env[1209]: time="2025-07-10T00:47:48.476952617Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb pid=3840 runtime=io.containerd.runc.v2 Jul 10 00:47:48.491485 systemd[1]: Started cri-containerd-63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb.scope. Jul 10 00:47:48.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.500000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.500000 audit: BPF prog-id=166 op=LOAD Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3840 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633323432623764613166613937376265376362383336346261376630 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3840 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633323432623764613166613937376265376362383336346261376630 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit: BPF prog-id=167 op=LOAD Jul 10 00:47:48.501000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003fa0b0 items=0 ppid=3840 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633323432623764613166613937376265376362383336346261376630 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit: BPF prog-id=168 op=LOAD Jul 10 00:47:48.501000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003fa0f8 items=0 ppid=3840 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633323432623764613166613937376265376362383336346261376630 Jul 10 00:47:48.501000 audit: BPF prog-id=168 op=UNLOAD Jul 10 00:47:48.501000 audit: BPF prog-id=167 op=UNLOAD Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { perfmon } for pid=3850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit[3850]: AVC avc: denied { bpf } for pid=3850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.501000 audit: BPF prog-id=169 op=LOAD Jul 10 00:47:48.501000 audit[3850]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003fa508 items=0 ppid=3840 pid=3850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.501000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633323432623764613166613937376265376362383336346261376630 Jul 10 00:47:48.502473 systemd-resolved[1149]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:47:48.527274 env[1209]: time="2025-07-10T00:47:48.527183043Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6fb9d69dc5-lhdbl,Uid:7971856c-7069-4d9d-9ccc-de726a8a0019,Namespace:calico-system,Attempt:1,} returns sandbox id \"63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb\"" Jul 10 00:47:48.562815 systemd-networkd[1029]: calicf956d4bb03: Link UP Jul 10 00:47:48.564448 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicf956d4bb03: link becomes ready Jul 10 00:47:48.564635 systemd-networkd[1029]: calicf956d4bb03: Gained carrier Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.381 [INFO][3752] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0 goldmane-768f4c5c69- calico-system 44f4e572-f541-4255-a16c-ef3be90dc5fc 1016 0 2025-07-10 00:47:26 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-2rwwm eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calicf956d4bb03 [] [] }} ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Namespace="calico-system" Pod="goldmane-768f4c5c69-2rwwm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--2rwwm-" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.381 [INFO][3752] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Namespace="calico-system" Pod="goldmane-768f4c5c69-2rwwm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.415 [INFO][3795] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" HandleID="k8s-pod-network.bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.416 [INFO][3795] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" HandleID="k8s-pod-network.bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003c86b0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-2rwwm", "timestamp":"2025-07-10 00:47:48.415847878 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.416 [INFO][3795] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.446 [INFO][3795] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.446 [INFO][3795] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.523 [INFO][3795] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" host="localhost" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.529 [INFO][3795] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.536 [INFO][3795] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.537 [INFO][3795] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.539 [INFO][3795] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.539 [INFO][3795] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" host="localhost" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.541 [INFO][3795] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59 Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.544 [INFO][3795] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" host="localhost" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.554 [INFO][3795] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" host="localhost" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.554 [INFO][3795] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" host="localhost" Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.554 [INFO][3795] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:48.575063 env[1209]: 2025-07-10 00:47:48.554 [INFO][3795] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" HandleID="k8s-pod-network.bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:47:48.575776 env[1209]: 2025-07-10 00:47:48.560 [INFO][3752] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Namespace="calico-system" Pod="goldmane-768f4c5c69-2rwwm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"44f4e572-f541-4255-a16c-ef3be90dc5fc", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-2rwwm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calicf956d4bb03", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:48.575776 env[1209]: 2025-07-10 00:47:48.560 [INFO][3752] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Namespace="calico-system" Pod="goldmane-768f4c5c69-2rwwm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:47:48.575776 env[1209]: 2025-07-10 00:47:48.560 [INFO][3752] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicf956d4bb03 ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Namespace="calico-system" Pod="goldmane-768f4c5c69-2rwwm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:47:48.575776 env[1209]: 2025-07-10 00:47:48.564 [INFO][3752] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Namespace="calico-system" Pod="goldmane-768f4c5c69-2rwwm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:47:48.575776 env[1209]: 2025-07-10 00:47:48.565 [INFO][3752] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Namespace="calico-system" Pod="goldmane-768f4c5c69-2rwwm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"44f4e572-f541-4255-a16c-ef3be90dc5fc", ResourceVersion:"1016", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59", Pod:"goldmane-768f4c5c69-2rwwm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calicf956d4bb03", MAC:"16:b9:9d:ae:47:ee", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:48.575776 env[1209]: 2025-07-10 00:47:48.572 [INFO][3752] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59" Namespace="calico-system" Pod="goldmane-768f4c5c69-2rwwm" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:47:48.586000 audit[3887]: NETFILTER_CFG table=filter:106 family=2 entries=48 op=nft_register_chain pid=3887 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:48.586000 audit[3887]: SYSCALL arch=c000003e syscall=46 success=yes exit=26368 a0=3 a1=7ffdb6551ba0 a2=0 a3=7ffdb6551b8c items=0 ppid=3388 pid=3887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.586000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:48.588038 env[1209]: time="2025-07-10T00:47:48.587979189Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:48.588038 env[1209]: time="2025-07-10T00:47:48.588016028Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:48.588038 env[1209]: time="2025-07-10T00:47:48.588027940Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:48.588223 env[1209]: time="2025-07-10T00:47:48.588177995Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59 pid=3891 runtime=io.containerd.runc.v2 Jul 10 00:47:48.596796 systemd[1]: Started cri-containerd-bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59.scope. Jul 10 00:47:48.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.607000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.607000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.607000 audit: BPF prog-id=170 op=LOAD Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=3891 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266613134383836306133346230393039393764366563396439363130 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=c items=0 ppid=3891 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266613134383836306133346230393039393764366563396439363130 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit: BPF prog-id=171 op=LOAD Jul 10 00:47:48.608000 audit[3900]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c00032fd10 items=0 ppid=3891 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266613134383836306133346230393039393764366563396439363130 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit: BPF prog-id=172 op=LOAD Jul 10 00:47:48.608000 audit[3900]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c00032fd58 items=0 ppid=3891 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266613134383836306133346230393039393764366563396439363130 Jul 10 00:47:48.608000 audit: BPF prog-id=172 op=UNLOAD Jul 10 00:47:48.608000 audit: BPF prog-id=171 op=UNLOAD Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { perfmon } for pid=3900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit[3900]: AVC avc: denied { bpf } for pid=3900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.608000 audit: BPF prog-id=173 op=LOAD Jul 10 00:47:48.608000 audit[3900]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c0003b0168 items=0 ppid=3891 pid=3900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266613134383836306133346230393039393764366563396439363130 Jul 10 00:47:48.609629 systemd-resolved[1149]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:47:48.634201 env[1209]: time="2025-07-10T00:47:48.634160367Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-2rwwm,Uid:44f4e572-f541-4255-a16c-ef3be90dc5fc,Namespace:calico-system,Attempt:1,} returns sandbox id \"bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59\"" Jul 10 00:47:48.651108 systemd-networkd[1029]: calia803763b93a: Link UP Jul 10 00:47:48.655526 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia803763b93a: link becomes ready Jul 10 00:47:48.654497 systemd-networkd[1029]: calia803763b93a: Gained carrier Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.386 [INFO][3763] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--89d2r-eth0 coredns-674b8bbfcf- kube-system 7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9 1015 0 2025-07-10 00:47:16 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-89d2r eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calia803763b93a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Namespace="kube-system" Pod="coredns-674b8bbfcf-89d2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--89d2r-" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.386 [INFO][3763] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Namespace="kube-system" Pod="coredns-674b8bbfcf-89d2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.425 [INFO][3802] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" HandleID="k8s-pod-network.983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.426 [INFO][3802] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" HandleID="k8s-pod-network.983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000366130), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-89d2r", "timestamp":"2025-07-10 00:47:48.42581188 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.426 [INFO][3802] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.554 [INFO][3802] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.554 [INFO][3802] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.624 [INFO][3802] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" host="localhost" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.629 [INFO][3802] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.633 [INFO][3802] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.635 [INFO][3802] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.636 [INFO][3802] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.636 [INFO][3802] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" host="localhost" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.639 [INFO][3802] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.641 [INFO][3802] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" host="localhost" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.646 [INFO][3802] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" host="localhost" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.646 [INFO][3802] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" host="localhost" Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.646 [INFO][3802] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:48.666182 env[1209]: 2025-07-10 00:47:48.646 [INFO][3802] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" HandleID="k8s-pod-network.983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:47:48.666825 env[1209]: 2025-07-10 00:47:48.648 [INFO][3763] cni-plugin/k8s.go 418: Populated endpoint ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Namespace="kube-system" Pod="coredns-674b8bbfcf-89d2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--89d2r-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-89d2r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia803763b93a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:48.666825 env[1209]: 2025-07-10 00:47:48.649 [INFO][3763] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Namespace="kube-system" Pod="coredns-674b8bbfcf-89d2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:47:48.666825 env[1209]: 2025-07-10 00:47:48.649 [INFO][3763] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia803763b93a ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Namespace="kube-system" Pod="coredns-674b8bbfcf-89d2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:47:48.666825 env[1209]: 2025-07-10 00:47:48.655 [INFO][3763] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Namespace="kube-system" Pod="coredns-674b8bbfcf-89d2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:47:48.666825 env[1209]: 2025-07-10 00:47:48.655 [INFO][3763] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Namespace="kube-system" Pod="coredns-674b8bbfcf-89d2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--89d2r-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9", ResourceVersion:"1015", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb", Pod:"coredns-674b8bbfcf-89d2r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia803763b93a", MAC:"9e:e7:1a:e0:e8:6d", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:48.666825 env[1209]: 2025-07-10 00:47:48.663 [INFO][3763] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb" Namespace="kube-system" Pod="coredns-674b8bbfcf-89d2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:47:48.676049 env[1209]: time="2025-07-10T00:47:48.675985549Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:48.676182 env[1209]: time="2025-07-10T00:47:48.676025144Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:48.676182 env[1209]: time="2025-07-10T00:47:48.676035563Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:48.676291 env[1209]: time="2025-07-10T00:47:48.676164026Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb pid=3943 runtime=io.containerd.runc.v2 Jul 10 00:47:48.678000 audit[3953]: NETFILTER_CFG table=filter:107 family=2 entries=50 op=nft_register_chain pid=3953 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:48.678000 audit[3953]: SYSCALL arch=c000003e syscall=46 success=yes exit=24928 a0=3 a1=7fff36caaa00 a2=0 a3=7fff36caa9ec items=0 ppid=3388 pid=3953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.678000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:48.686182 systemd[1]: Started cri-containerd-983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb.scope. Jul 10 00:47:48.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.695000 audit: BPF prog-id=174 op=LOAD Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=3943 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938336561636666643035363262343665376561393165626132646134 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=c items=0 ppid=3943 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938336561636666643035363262343665376561393165626132646134 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit: BPF prog-id=175 op=LOAD Jul 10 00:47:48.696000 audit[3955]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c0002153c0 items=0 ppid=3943 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938336561636666643035363262343665376561393165626132646134 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit: BPF prog-id=176 op=LOAD Jul 10 00:47:48.696000 audit[3955]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c000215408 items=0 ppid=3943 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938336561636666643035363262343665376561393165626132646134 Jul 10 00:47:48.696000 audit: BPF prog-id=176 op=UNLOAD Jul 10 00:47:48.696000 audit: BPF prog-id=175 op=UNLOAD Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.696000 audit: BPF prog-id=177 op=LOAD Jul 10 00:47:48.696000 audit[3955]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c000215818 items=0 ppid=3943 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938336561636666643035363262343665376561393165626132646134 Jul 10 00:47:48.697440 systemd-resolved[1149]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:47:48.717129 env[1209]: time="2025-07-10T00:47:48.717085499Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-89d2r,Uid:7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9,Namespace:kube-system,Attempt:1,} returns sandbox id \"983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb\"" Jul 10 00:47:48.717839 kubelet[1964]: E0710 00:47:48.717816 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:48.723570 env[1209]: time="2025-07-10T00:47:48.722946512Z" level=info msg="CreateContainer within sandbox \"983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:47:48.739049 env[1209]: time="2025-07-10T00:47:48.739012112Z" level=info msg="CreateContainer within sandbox \"983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"fe95d7725e5ff25b6b252d239afae6637cecf498c815fb5ed34504db92261696\"" Jul 10 00:47:48.739501 env[1209]: time="2025-07-10T00:47:48.739465089Z" level=info msg="StartContainer for \"fe95d7725e5ff25b6b252d239afae6637cecf498c815fb5ed34504db92261696\"" Jul 10 00:47:48.756161 systemd[1]: Started cri-containerd-fe95d7725e5ff25b6b252d239afae6637cecf498c815fb5ed34504db92261696.scope. Jul 10 00:47:48.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.773000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.773000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit: BPF prog-id=178 op=LOAD Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3943 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393564373732356535666632356236623235326432333961666165 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3943 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393564373732356535666632356236623235326432333961666165 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit: BPF prog-id=179 op=LOAD Jul 10 00:47:48.774000 audit[3985]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000291950 items=0 ppid=3943 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393564373732356535666632356236623235326432333961666165 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit: BPF prog-id=180 op=LOAD Jul 10 00:47:48.774000 audit[3985]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000291998 items=0 ppid=3943 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393564373732356535666632356236623235326432333961666165 Jul 10 00:47:48.774000 audit: BPF prog-id=180 op=UNLOAD Jul 10 00:47:48.774000 audit: BPF prog-id=179 op=UNLOAD Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { perfmon } for pid=3985 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit[3985]: AVC avc: denied { bpf } for pid=3985 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:48.774000 audit: BPF prog-id=181 op=LOAD Jul 10 00:47:48.774000 audit[3985]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000291da8 items=0 ppid=3943 pid=3985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:48.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393564373732356535666632356236623235326432333961666165 Jul 10 00:47:48.793315 env[1209]: time="2025-07-10T00:47:48.793163262Z" level=info msg="StartContainer for \"fe95d7725e5ff25b6b252d239afae6637cecf498c815fb5ed34504db92261696\" returns successfully" Jul 10 00:47:48.856000 audit[3995]: AVC avc: denied { getattr } for pid=3995 comm="coredns" path="cgroup:[4026532429]" dev="nsfs" ino=4026532429 scontext=system_u:system_r:svirt_lxc_net_t:s0:c123,c193 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:47:48.856000 audit[3995]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c0001f0a98 a2=c0006041d8 a3=0 items=0 ppid=3943 pid=3995 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c123,c193 key=(null) Jul 10 00:47:48.856000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:47:49.231897 env[1209]: time="2025-07-10T00:47:49.231805280Z" level=info msg="StopPodSandbox for \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\"" Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.275 [INFO][4029] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.275 [INFO][4029] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" iface="eth0" netns="/var/run/netns/cni-f36b6b4b-0b88-8b28-9be2-7f5b9a84ef7e" Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.275 [INFO][4029] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" iface="eth0" netns="/var/run/netns/cni-f36b6b4b-0b88-8b28-9be2-7f5b9a84ef7e" Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.275 [INFO][4029] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" iface="eth0" netns="/var/run/netns/cni-f36b6b4b-0b88-8b28-9be2-7f5b9a84ef7e" Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.275 [INFO][4029] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.275 [INFO][4029] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.301 [INFO][4038] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" HandleID="k8s-pod-network.b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.302 [INFO][4038] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.302 [INFO][4038] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.307 [WARNING][4038] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" HandleID="k8s-pod-network.b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.307 [INFO][4038] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" HandleID="k8s-pod-network.b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.309 [INFO][4038] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:49.313833 env[1209]: 2025-07-10 00:47:49.311 [INFO][4029] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:47:49.314280 env[1209]: time="2025-07-10T00:47:49.313963752Z" level=info msg="TearDown network for sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\" successfully" Jul 10 00:47:49.314280 env[1209]: time="2025-07-10T00:47:49.313997305Z" level=info msg="StopPodSandbox for \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\" returns successfully" Jul 10 00:47:49.314762 env[1209]: time="2025-07-10T00:47:49.314715283Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bbc66c4f5-72mzq,Uid:dc95b02f-1623-40c8-ae17-bd260422ebf1,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:47:49.333178 kubelet[1964]: E0710 00:47:49.333128 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:49.355178 kubelet[1964]: I0710 00:47:49.354998 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-89d2r" podStartSLOduration=33.354958538 podStartE2EDuration="33.354958538s" podCreationTimestamp="2025-07-10 00:47:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:47:49.348839529 +0000 UTC m=+39.202731988" watchObservedRunningTime="2025-07-10 00:47:49.354958538 +0000 UTC m=+39.208850997" Jul 10 00:47:49.354000 audit[4059]: NETFILTER_CFG table=filter:108 family=2 entries=20 op=nft_register_rule pid=4059 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:49.356068 kernel: kauditd_printk_skb: 958 callbacks suppressed Jul 10 00:47:49.356127 kernel: audit: type=1325 audit(1752108469.354:1227): table=filter:108 family=2 entries=20 op=nft_register_rule pid=4059 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:49.354000 audit[4059]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc9cb5a950 a2=0 a3=7ffc9cb5a93c items=0 ppid=2118 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.363647 kernel: audit: type=1300 audit(1752108469.354:1227): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc9cb5a950 a2=0 a3=7ffc9cb5a93c items=0 ppid=2118 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.354000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:49.364000 audit[4059]: NETFILTER_CFG table=nat:109 family=2 entries=14 op=nft_register_rule pid=4059 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:49.370654 kernel: audit: type=1327 audit(1752108469.354:1227): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:49.370703 kernel: audit: type=1325 audit(1752108469.364:1228): table=nat:109 family=2 entries=14 op=nft_register_rule pid=4059 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:49.376972 kernel: audit: type=1300 audit(1752108469.364:1228): arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc9cb5a950 a2=0 a3=0 items=0 ppid=2118 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.364000 audit[4059]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc9cb5a950 a2=0 a3=0 items=0 ppid=2118 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.364000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:49.381420 kernel: audit: type=1327 audit(1752108469.364:1228): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:49.395000 audit[4061]: NETFILTER_CFG table=filter:110 family=2 entries=17 op=nft_register_rule pid=4061 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:49.395000 audit[4061]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe3ac4acd0 a2=0 a3=7ffe3ac4acbc items=0 ppid=2118 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.404315 kernel: audit: type=1325 audit(1752108469.395:1229): table=filter:110 family=2 entries=17 op=nft_register_rule pid=4061 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:49.405046 kernel: audit: type=1300 audit(1752108469.395:1229): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe3ac4acd0 a2=0 a3=7ffe3ac4acbc items=0 ppid=2118 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.405106 kernel: audit: type=1327 audit(1752108469.395:1229): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:49.395000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:49.407000 audit[4061]: NETFILTER_CFG table=nat:111 family=2 entries=35 op=nft_register_chain pid=4061 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:49.407000 audit[4061]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffe3ac4acd0 a2=0 a3=7ffe3ac4acbc items=0 ppid=2118 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.407000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:49.413466 kernel: audit: type=1325 audit(1752108469.407:1230): table=nat:111 family=2 entries=35 op=nft_register_chain pid=4061 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:49.440926 systemd[1]: run-netns-cni\x2df36b6b4b\x2d0b88\x2d8b28\x2d9be2\x2d7f5b9a84ef7e.mount: Deactivated successfully. Jul 10 00:47:49.469326 systemd-networkd[1029]: calie6f4884f940: Link UP Jul 10 00:47:49.470959 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:47:49.471064 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie6f4884f940: link becomes ready Jul 10 00:47:49.471887 systemd-networkd[1029]: calie6f4884f940: Gained carrier Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.405 [INFO][4045] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0 calico-apiserver-bbc66c4f5- calico-apiserver dc95b02f-1623-40c8-ae17-bd260422ebf1 1037 0 2025-07-10 00:47:24 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:bbc66c4f5 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-bbc66c4f5-72mzq eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calie6f4884f940 [] [] }} ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-72mzq" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.405 [INFO][4045] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-72mzq" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.430 [INFO][4065] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" HandleID="k8s-pod-network.bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.430 [INFO][4065] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" HandleID="k8s-pod-network.bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c9710), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-bbc66c4f5-72mzq", "timestamp":"2025-07-10 00:47:49.430354303 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.430 [INFO][4065] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.430 [INFO][4065] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.430 [INFO][4065] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.443 [INFO][4065] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" host="localhost" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.448 [INFO][4065] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.452 [INFO][4065] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.453 [INFO][4065] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.455 [INFO][4065] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.455 [INFO][4065] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" host="localhost" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.456 [INFO][4065] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.459 [INFO][4065] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" host="localhost" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.464 [INFO][4065] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" host="localhost" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.465 [INFO][4065] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" host="localhost" Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.465 [INFO][4065] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:49.482717 env[1209]: 2025-07-10 00:47:49.465 [INFO][4065] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" HandleID="k8s-pod-network.bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:47:49.483544 env[1209]: 2025-07-10 00:47:49.467 [INFO][4045] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-72mzq" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0", GenerateName:"calico-apiserver-bbc66c4f5-", Namespace:"calico-apiserver", SelfLink:"", UID:"dc95b02f-1623-40c8-ae17-bd260422ebf1", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bbc66c4f5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-bbc66c4f5-72mzq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie6f4884f940", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:49.483544 env[1209]: 2025-07-10 00:47:49.467 [INFO][4045] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-72mzq" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:47:49.483544 env[1209]: 2025-07-10 00:47:49.467 [INFO][4045] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calie6f4884f940 ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-72mzq" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:47:49.483544 env[1209]: 2025-07-10 00:47:49.472 [INFO][4045] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-72mzq" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:47:49.483544 env[1209]: 2025-07-10 00:47:49.472 [INFO][4045] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-72mzq" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0", GenerateName:"calico-apiserver-bbc66c4f5-", Namespace:"calico-apiserver", SelfLink:"", UID:"dc95b02f-1623-40c8-ae17-bd260422ebf1", ResourceVersion:"1037", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bbc66c4f5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d", Pod:"calico-apiserver-bbc66c4f5-72mzq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie6f4884f940", MAC:"72:fd:96:c5:9f:c0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:49.483544 env[1209]: 2025-07-10 00:47:49.479 [INFO][4045] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-72mzq" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:47:49.493000 audit[4080]: NETFILTER_CFG table=filter:112 family=2 entries=68 op=nft_register_chain pid=4080 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:49.493000 audit[4080]: SYSCALL arch=c000003e syscall=46 success=yes exit=34624 a0=3 a1=7ffef8bf48b0 a2=0 a3=7ffef8bf489c items=0 ppid=3388 pid=4080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.493000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:49.576919 env[1209]: time="2025-07-10T00:47:49.576827160Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:49.577064 env[1209]: time="2025-07-10T00:47:49.576923352Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:49.577064 env[1209]: time="2025-07-10T00:47:49.576946957Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:49.577262 env[1209]: time="2025-07-10T00:47:49.577204223Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d pid=4088 runtime=io.containerd.runc.v2 Jul 10 00:47:49.592503 systemd[1]: Started cri-containerd-bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d.scope. Jul 10 00:47:49.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit: BPF prog-id=182 op=LOAD Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4088 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633766643037383335383239656264326265333531646166626630 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4088 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633766643037383335383239656264326265333531646166626630 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit: BPF prog-id=183 op=LOAD Jul 10 00:47:49.601000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00037c420 items=0 ppid=4088 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633766643037383335383239656264326265333531646166626630 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit: BPF prog-id=184 op=LOAD Jul 10 00:47:49.601000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00037c468 items=0 ppid=4088 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633766643037383335383239656264326265333531646166626630 Jul 10 00:47:49.601000 audit: BPF prog-id=184 op=UNLOAD Jul 10 00:47:49.601000 audit: BPF prog-id=183 op=UNLOAD Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { perfmon } for pid=4098 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit[4098]: AVC avc: denied { bpf } for pid=4098 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:49.601000 audit: BPF prog-id=185 op=LOAD Jul 10 00:47:49.601000 audit[4098]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00037c878 items=0 ppid=4088 pid=4098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:49.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263633766643037383335383239656264326265333531646166626630 Jul 10 00:47:49.602624 systemd-resolved[1149]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:47:49.625011 env[1209]: time="2025-07-10T00:47:49.624968648Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bbc66c4f5-72mzq,Uid:dc95b02f-1623-40c8-ae17-bd260422ebf1,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d\"" Jul 10 00:47:49.828082 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2472560245.mount: Deactivated successfully. Jul 10 00:47:49.925602 systemd-networkd[1029]: cali94093fb3f47: Gained IPv6LL Jul 10 00:47:49.985765 env[1209]: time="2025-07-10T00:47:49.985702163Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:49.987941 env[1209]: time="2025-07-10T00:47:49.987901512Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:49.989920 env[1209]: time="2025-07-10T00:47:49.989886204Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:49.991289 env[1209]: time="2025-07-10T00:47:49.991259610Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:49.991844 env[1209]: time="2025-07-10T00:47:49.991815893Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 10 00:47:49.992839 env[1209]: time="2025-07-10T00:47:49.992818618Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 10 00:47:49.996791 env[1209]: time="2025-07-10T00:47:49.996742316Z" level=info msg="CreateContainer within sandbox \"b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 10 00:47:50.009705 env[1209]: time="2025-07-10T00:47:50.009656370Z" level=info msg="CreateContainer within sandbox \"b43713b4e2968ee8db7a9d69eb71fde4a638ee4af4eecd3fb9f5490834f911d9\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"9d4804692dea0f150b0aad9d7f17edf61c62a1baf1baa801d54da647fc7a930b\"" Jul 10 00:47:50.010065 env[1209]: time="2025-07-10T00:47:50.010031779Z" level=info msg="StartContainer for \"9d4804692dea0f150b0aad9d7f17edf61c62a1baf1baa801d54da647fc7a930b\"" Jul 10 00:47:50.025009 systemd[1]: Started cri-containerd-9d4804692dea0f150b0aad9d7f17edf61c62a1baf1baa801d54da647fc7a930b.scope. Jul 10 00:47:50.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit: BPF prog-id=186 op=LOAD Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3490 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343830343639326465613066313530623061616439643766313765 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3490 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343830343639326465613066313530623061616439643766313765 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.037000 audit: BPF prog-id=187 op=LOAD Jul 10 00:47:50.037000 audit[4130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002cbd10 items=0 ppid=3490 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343830343639326465613066313530623061616439643766313765 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit: BPF prog-id=188 op=LOAD Jul 10 00:47:50.038000 audit[4130]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002cbd58 items=0 ppid=3490 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343830343639326465613066313530623061616439643766313765 Jul 10 00:47:50.038000 audit: BPF prog-id=188 op=UNLOAD Jul 10 00:47:50.038000 audit: BPF prog-id=187 op=UNLOAD Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { perfmon } for pid=4130 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit[4130]: AVC avc: denied { bpf } for pid=4130 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.038000 audit: BPF prog-id=189 op=LOAD Jul 10 00:47:50.038000 audit[4130]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b2168 items=0 ppid=3490 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964343830343639326465613066313530623061616439643766313765 Jul 10 00:47:50.060218 systemd[1]: Started sshd@8-10.0.0.138:22-10.0.0.1:51042.service. Jul 10 00:47:50.059000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.138:22-10.0.0.1:51042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:50.069629 env[1209]: time="2025-07-10T00:47:50.069544926Z" level=info msg="StartContainer for \"9d4804692dea0f150b0aad9d7f17edf61c62a1baf1baa801d54da647fc7a930b\" returns successfully" Jul 10 00:47:50.095000 audit[4154]: USER_ACCT pid=4154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:50.096177 sshd[4154]: Accepted publickey for core from 10.0.0.1 port 51042 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:47:50.096000 audit[4154]: CRED_ACQ pid=4154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:50.097000 audit[4154]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5e3c9b10 a2=3 a3=0 items=0 ppid=1 pid=4154 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.097000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:47:50.098135 sshd[4154]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:47:50.102126 systemd-logind[1196]: New session 9 of user core. Jul 10 00:47:50.102958 systemd[1]: Started session-9.scope. Jul 10 00:47:50.106000 audit[4154]: USER_START pid=4154 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:50.108000 audit[4164]: CRED_ACQ pid=4164 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:50.213405 sshd[4154]: pam_unix(sshd:session): session closed for user core Jul 10 00:47:50.213000 audit[4154]: USER_END pid=4154 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:50.214000 audit[4154]: CRED_DISP pid=4154 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:50.215949 systemd[1]: sshd@8-10.0.0.138:22-10.0.0.1:51042.service: Deactivated successfully. Jul 10 00:47:50.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.138:22-10.0.0.1:51042 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:50.216698 systemd[1]: session-9.scope: Deactivated successfully. Jul 10 00:47:50.217171 systemd-logind[1196]: Session 9 logged out. Waiting for processes to exit. Jul 10 00:47:50.217868 systemd-logind[1196]: Removed session 9. Jul 10 00:47:50.232040 env[1209]: time="2025-07-10T00:47:50.231987139Z" level=info msg="StopPodSandbox for \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\"" Jul 10 00:47:50.232281 env[1209]: time="2025-07-10T00:47:50.232042604Z" level=info msg="StopPodSandbox for \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\"" Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.273 [INFO][4200] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.273 [INFO][4200] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" iface="eth0" netns="/var/run/netns/cni-fdfb2248-61ef-17df-1b78-e9af945eb3ef" Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.274 [INFO][4200] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" iface="eth0" netns="/var/run/netns/cni-fdfb2248-61ef-17df-1b78-e9af945eb3ef" Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.274 [INFO][4200] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" iface="eth0" netns="/var/run/netns/cni-fdfb2248-61ef-17df-1b78-e9af945eb3ef" Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.274 [INFO][4200] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.274 [INFO][4200] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.295 [INFO][4216] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" HandleID="k8s-pod-network.16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.295 [INFO][4216] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.295 [INFO][4216] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.301 [WARNING][4216] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" HandleID="k8s-pod-network.16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.301 [INFO][4216] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" HandleID="k8s-pod-network.16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.303 [INFO][4216] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:50.310282 env[1209]: 2025-07-10 00:47:50.306 [INFO][4200] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:47:50.311034 env[1209]: time="2025-07-10T00:47:50.310547240Z" level=info msg="TearDown network for sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\" successfully" Jul 10 00:47:50.311034 env[1209]: time="2025-07-10T00:47:50.310571607Z" level=info msg="StopPodSandbox for \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\" returns successfully" Jul 10 00:47:50.311083 kubelet[1964]: E0710 00:47:50.310723 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:50.312238 env[1209]: time="2025-07-10T00:47:50.312202089Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-c5stg,Uid:fad3c025-db1a-4fad-a522-ba2e599e52d0,Namespace:kube-system,Attempt:1,}" Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.281 [INFO][4201] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.282 [INFO][4201] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" iface="eth0" netns="/var/run/netns/cni-95fc302c-e12b-be91-0a93-218b89ae4840" Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.282 [INFO][4201] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" iface="eth0" netns="/var/run/netns/cni-95fc302c-e12b-be91-0a93-218b89ae4840" Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.282 [INFO][4201] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" iface="eth0" netns="/var/run/netns/cni-95fc302c-e12b-be91-0a93-218b89ae4840" Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.282 [INFO][4201] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.282 [INFO][4201] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.305 [INFO][4223] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" HandleID="k8s-pod-network.8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.305 [INFO][4223] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.305 [INFO][4223] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.312 [WARNING][4223] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" HandleID="k8s-pod-network.8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.312 [INFO][4223] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" HandleID="k8s-pod-network.8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.315 [INFO][4223] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:50.319642 env[1209]: 2025-07-10 00:47:50.317 [INFO][4201] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:47:50.320411 env[1209]: time="2025-07-10T00:47:50.320357134Z" level=info msg="TearDown network for sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\" successfully" Jul 10 00:47:50.320493 env[1209]: time="2025-07-10T00:47:50.320471050Z" level=info msg="StopPodSandbox for \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\" returns successfully" Jul 10 00:47:50.321192 env[1209]: time="2025-07-10T00:47:50.321166064Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-dwxds,Uid:5b03f62d-564c-468f-af64-90b8cb619060,Namespace:calico-system,Attempt:1,}" Jul 10 00:47:50.343017 kubelet[1964]: E0710 00:47:50.342979 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:50.355166 kubelet[1964]: I0710 00:47:50.355017 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-5fd7d9cdd-652lv" podStartSLOduration=1.308015696 podStartE2EDuration="5.355002144s" podCreationTimestamp="2025-07-10 00:47:45 +0000 UTC" firstStartedPulling="2025-07-10 00:47:45.945652069 +0000 UTC m=+35.799544528" lastFinishedPulling="2025-07-10 00:47:49.992638397 +0000 UTC m=+39.846530976" observedRunningTime="2025-07-10 00:47:50.354293384 +0000 UTC m=+40.208185863" watchObservedRunningTime="2025-07-10 00:47:50.355002144 +0000 UTC m=+40.208894623" Jul 10 00:47:50.362000 audit[4261]: NETFILTER_CFG table=filter:113 family=2 entries=13 op=nft_register_rule pid=4261 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:50.362000 audit[4261]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffda7843ae0 a2=0 a3=7ffda7843acc items=0 ppid=2118 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.362000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:50.368000 audit[4261]: NETFILTER_CFG table=nat:114 family=2 entries=27 op=nft_register_chain pid=4261 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:50.368000 audit[4261]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffda7843ae0 a2=0 a3=7ffda7843acc items=0 ppid=2118 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.368000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:50.440733 systemd[1]: run-netns-cni\x2d95fc302c\x2de12b\x2dbe91\x2d0a93\x2d218b89ae4840.mount: Deactivated successfully. Jul 10 00:47:50.440817 systemd[1]: run-netns-cni\x2dfdfb2248\x2d61ef\x2d17df\x2d1b78\x2de9af945eb3ef.mount: Deactivated successfully. Jul 10 00:47:50.445843 systemd-networkd[1029]: cali65510ccd19a: Link UP Jul 10 00:47:50.448904 systemd-networkd[1029]: cali65510ccd19a: Gained carrier Jul 10 00:47:50.449436 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali65510ccd19a: link becomes ready Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.384 [INFO][4247] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--dwxds-eth0 csi-node-driver- calico-system 5b03f62d-564c-468f-af64-90b8cb619060 1061 0 2025-07-10 00:47:26 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-dwxds eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali65510ccd19a [] [] }} ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Namespace="calico-system" Pod="csi-node-driver-dwxds" WorkloadEndpoint="localhost-k8s-csi--node--driver--dwxds-" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.384 [INFO][4247] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Namespace="calico-system" Pod="csi-node-driver-dwxds" WorkloadEndpoint="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.411 [INFO][4269] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" HandleID="k8s-pod-network.f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.412 [INFO][4269] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" HandleID="k8s-pod-network.f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004f7b0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-dwxds", "timestamp":"2025-07-10 00:47:50.411844072 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.412 [INFO][4269] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.412 [INFO][4269] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.412 [INFO][4269] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.418 [INFO][4269] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" host="localhost" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.423 [INFO][4269] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.426 [INFO][4269] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.427 [INFO][4269] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.429 [INFO][4269] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.429 [INFO][4269] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" host="localhost" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.431 [INFO][4269] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7 Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.434 [INFO][4269] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" host="localhost" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.441 [INFO][4269] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" host="localhost" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.442 [INFO][4269] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" host="localhost" Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.442 [INFO][4269] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:50.463762 env[1209]: 2025-07-10 00:47:50.442 [INFO][4269] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" HandleID="k8s-pod-network.f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:47:50.464516 env[1209]: 2025-07-10 00:47:50.444 [INFO][4247] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Namespace="calico-system" Pod="csi-node-driver-dwxds" WorkloadEndpoint="localhost-k8s-csi--node--driver--dwxds-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--dwxds-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5b03f62d-564c-468f-af64-90b8cb619060", ResourceVersion:"1061", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-dwxds", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali65510ccd19a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:50.464516 env[1209]: 2025-07-10 00:47:50.444 [INFO][4247] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Namespace="calico-system" Pod="csi-node-driver-dwxds" WorkloadEndpoint="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:47:50.464516 env[1209]: 2025-07-10 00:47:50.444 [INFO][4247] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali65510ccd19a ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Namespace="calico-system" Pod="csi-node-driver-dwxds" WorkloadEndpoint="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:47:50.464516 env[1209]: 2025-07-10 00:47:50.449 [INFO][4247] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Namespace="calico-system" Pod="csi-node-driver-dwxds" WorkloadEndpoint="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:47:50.464516 env[1209]: 2025-07-10 00:47:50.451 [INFO][4247] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Namespace="calico-system" Pod="csi-node-driver-dwxds" WorkloadEndpoint="localhost-k8s-csi--node--driver--dwxds-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--dwxds-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5b03f62d-564c-468f-af64-90b8cb619060", ResourceVersion:"1061", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7", Pod:"csi-node-driver-dwxds", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali65510ccd19a", MAC:"36:17:02:60:0c:61", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:50.464516 env[1209]: 2025-07-10 00:47:50.461 [INFO][4247] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7" Namespace="calico-system" Pod="csi-node-driver-dwxds" WorkloadEndpoint="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:47:50.472000 audit[4299]: NETFILTER_CFG table=filter:115 family=2 entries=48 op=nft_register_chain pid=4299 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:50.472000 audit[4299]: SYSCALL arch=c000003e syscall=46 success=yes exit=23124 a0=3 a1=7ffcc3d6e400 a2=0 a3=7ffcc3d6e3ec items=0 ppid=3388 pid=4299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.472000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:50.473332 env[1209]: time="2025-07-10T00:47:50.472970578Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:50.473332 env[1209]: time="2025-07-10T00:47:50.473065137Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:50.473332 env[1209]: time="2025-07-10T00:47:50.473103329Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:50.473438 env[1209]: time="2025-07-10T00:47:50.473340588Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7 pid=4300 runtime=io.containerd.runc.v2 Jul 10 00:47:50.487649 systemd[1]: run-containerd-runc-k8s.io-f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7-runc.wyTuCl.mount: Deactivated successfully. Jul 10 00:47:50.489235 systemd[1]: Started cri-containerd-f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7.scope. Jul 10 00:47:50.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.498000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.498000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.498000 audit: BPF prog-id=190 op=LOAD Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4300 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637396534656563343839356539353833353032303737343033663930 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4300 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637396534656563343839356539353833353032303737343033663930 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit: BPF prog-id=191 op=LOAD Jul 10 00:47:50.499000 audit[4311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00035cab0 items=0 ppid=4300 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637396534656563343839356539353833353032303737343033663930 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit: BPF prog-id=192 op=LOAD Jul 10 00:47:50.499000 audit[4311]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00035caf8 items=0 ppid=4300 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637396534656563343839356539353833353032303737343033663930 Jul 10 00:47:50.499000 audit: BPF prog-id=192 op=UNLOAD Jul 10 00:47:50.499000 audit: BPF prog-id=191 op=UNLOAD Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { perfmon } for pid=4311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit[4311]: AVC avc: denied { bpf } for pid=4311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.499000 audit: BPF prog-id=193 op=LOAD Jul 10 00:47:50.499000 audit[4311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00035cf08 items=0 ppid=4300 pid=4311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.499000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637396534656563343839356539353833353032303737343033663930 Jul 10 00:47:50.500810 systemd-resolved[1149]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:47:50.512068 env[1209]: time="2025-07-10T00:47:50.512031174Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-dwxds,Uid:5b03f62d-564c-468f-af64-90b8cb619060,Namespace:calico-system,Attempt:1,} returns sandbox id \"f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7\"" Jul 10 00:47:50.545784 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:47:50.545903 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califbb2b2cc2d5: link becomes ready Jul 10 00:47:50.547526 systemd-networkd[1029]: califbb2b2cc2d5: Link UP Jul 10 00:47:50.547754 systemd-networkd[1029]: califbb2b2cc2d5: Gained carrier Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.382 [INFO][4236] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--c5stg-eth0 coredns-674b8bbfcf- kube-system fad3c025-db1a-4fad-a522-ba2e599e52d0 1060 0 2025-07-10 00:47:16 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-c5stg eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] califbb2b2cc2d5 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Namespace="kube-system" Pod="coredns-674b8bbfcf-c5stg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--c5stg-" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.382 [INFO][4236] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Namespace="kube-system" Pod="coredns-674b8bbfcf-c5stg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.412 [INFO][4267] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" HandleID="k8s-pod-network.fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.412 [INFO][4267] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" HandleID="k8s-pod-network.fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004ea80), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-c5stg", "timestamp":"2025-07-10 00:47:50.412402928 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.413 [INFO][4267] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.442 [INFO][4267] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.442 [INFO][4267] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.518 [INFO][4267] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" host="localhost" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.523 [INFO][4267] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.527 [INFO][4267] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.528 [INFO][4267] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.530 [INFO][4267] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.530 [INFO][4267] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" host="localhost" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.531 [INFO][4267] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2 Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.534 [INFO][4267] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" host="localhost" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.538 [INFO][4267] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" host="localhost" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.538 [INFO][4267] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" host="localhost" Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.538 [INFO][4267] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:50.558594 env[1209]: 2025-07-10 00:47:50.538 [INFO][4267] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" HandleID="k8s-pod-network.fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:47:50.559234 env[1209]: 2025-07-10 00:47:50.541 [INFO][4236] cni-plugin/k8s.go 418: Populated endpoint ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Namespace="kube-system" Pod="coredns-674b8bbfcf-c5stg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--c5stg-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fad3c025-db1a-4fad-a522-ba2e599e52d0", ResourceVersion:"1060", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-c5stg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"califbb2b2cc2d5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:50.559234 env[1209]: 2025-07-10 00:47:50.541 [INFO][4236] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Namespace="kube-system" Pod="coredns-674b8bbfcf-c5stg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:47:50.559234 env[1209]: 2025-07-10 00:47:50.541 [INFO][4236] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to califbb2b2cc2d5 ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Namespace="kube-system" Pod="coredns-674b8bbfcf-c5stg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:47:50.559234 env[1209]: 2025-07-10 00:47:50.546 [INFO][4236] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Namespace="kube-system" Pod="coredns-674b8bbfcf-c5stg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:47:50.559234 env[1209]: 2025-07-10 00:47:50.546 [INFO][4236] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Namespace="kube-system" Pod="coredns-674b8bbfcf-c5stg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--c5stg-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fad3c025-db1a-4fad-a522-ba2e599e52d0", ResourceVersion:"1060", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2", Pod:"coredns-674b8bbfcf-c5stg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"califbb2b2cc2d5", MAC:"4e:e3:b1:10:64:44", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:50.559234 env[1209]: 2025-07-10 00:47:50.555 [INFO][4236] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2" Namespace="kube-system" Pod="coredns-674b8bbfcf-c5stg" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:47:50.566000 audit[4343]: NETFILTER_CFG table=filter:116 family=2 entries=48 op=nft_register_chain pid=4343 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:50.566000 audit[4343]: SYSCALL arch=c000003e syscall=46 success=yes exit=22704 a0=3 a1=7ffd21835650 a2=0 a3=7ffd2183563c items=0 ppid=3388 pid=4343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.566000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:50.567608 systemd-networkd[1029]: calicf956d4bb03: Gained IPv6LL Jul 10 00:47:50.567863 systemd-networkd[1029]: calia803763b93a: Gained IPv6LL Jul 10 00:47:50.576635 env[1209]: time="2025-07-10T00:47:50.576560493Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:50.576635 env[1209]: time="2025-07-10T00:47:50.576608153Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:50.576635 env[1209]: time="2025-07-10T00:47:50.576619775Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:50.576868 env[1209]: time="2025-07-10T00:47:50.576815525Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2 pid=4350 runtime=io.containerd.runc.v2 Jul 10 00:47:50.589964 systemd[1]: Started cri-containerd-fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2.scope. Jul 10 00:47:50.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit: BPF prog-id=194 op=LOAD Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4350 pid=4361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664383032326236346563663365366132313331653436313633393436 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4350 pid=4361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664383032326236346563663365366132313331653436313633393436 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.601000 audit: BPF prog-id=195 op=LOAD Jul 10 00:47:50.601000 audit[4361]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002e5020 items=0 ppid=4350 pid=4361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.601000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664383032326236346563663365366132313331653436313633393436 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit: BPF prog-id=196 op=LOAD Jul 10 00:47:50.602000 audit[4361]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002e5068 items=0 ppid=4350 pid=4361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664383032326236346563663365366132313331653436313633393436 Jul 10 00:47:50.602000 audit: BPF prog-id=196 op=UNLOAD Jul 10 00:47:50.602000 audit: BPF prog-id=195 op=UNLOAD Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { perfmon } for pid=4361 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit[4361]: AVC avc: denied { bpf } for pid=4361 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.602000 audit: BPF prog-id=197 op=LOAD Jul 10 00:47:50.602000 audit[4361]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002e5478 items=0 ppid=4350 pid=4361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664383032326236346563663365366132313331653436313633393436 Jul 10 00:47:50.603431 systemd-resolved[1149]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:47:50.628445 env[1209]: time="2025-07-10T00:47:50.625731972Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-c5stg,Uid:fad3c025-db1a-4fad-a522-ba2e599e52d0,Namespace:kube-system,Attempt:1,} returns sandbox id \"fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2\"" Jul 10 00:47:50.629178 kubelet[1964]: E0710 00:47:50.629133 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:50.629553 systemd-networkd[1029]: calie6f4884f940: Gained IPv6LL Jul 10 00:47:50.634332 env[1209]: time="2025-07-10T00:47:50.634297694Z" level=info msg="CreateContainer within sandbox \"fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:47:50.645742 env[1209]: time="2025-07-10T00:47:50.645703624Z" level=info msg="CreateContainer within sandbox \"fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"41285b83d8c63aa227e988b004e07de553682f688f90174823b45f2ef89f3c7a\"" Jul 10 00:47:50.646531 env[1209]: time="2025-07-10T00:47:50.646491243Z" level=info msg="StartContainer for \"41285b83d8c63aa227e988b004e07de553682f688f90174823b45f2ef89f3c7a\"" Jul 10 00:47:50.660781 systemd[1]: Started cri-containerd-41285b83d8c63aa227e988b004e07de553682f688f90174823b45f2ef89f3c7a.scope. Jul 10 00:47:50.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.671000 audit: BPF prog-id=198 op=LOAD Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4350 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431323835623833643863363361613232376539383862303034653037 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4350 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431323835623833643863363361613232376539383862303034653037 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit: BPF prog-id=199 op=LOAD Jul 10 00:47:50.672000 audit[4391]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001d6a30 items=0 ppid=4350 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431323835623833643863363361613232376539383862303034653037 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit: BPF prog-id=200 op=LOAD Jul 10 00:47:50.672000 audit[4391]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001d6a78 items=0 ppid=4350 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431323835623833643863363361613232376539383862303034653037 Jul 10 00:47:50.672000 audit: BPF prog-id=200 op=UNLOAD Jul 10 00:47:50.672000 audit: BPF prog-id=199 op=UNLOAD Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { perfmon } for pid=4391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit[4391]: AVC avc: denied { bpf } for pid=4391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:50.672000 audit: BPF prog-id=201 op=LOAD Jul 10 00:47:50.672000 audit[4391]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001d6e88 items=0 ppid=4350 pid=4391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:50.672000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431323835623833643863363361613232376539383862303034653037 Jul 10 00:47:50.684075 env[1209]: time="2025-07-10T00:47:50.684044319Z" level=info msg="StartContainer for \"41285b83d8c63aa227e988b004e07de553682f688f90174823b45f2ef89f3c7a\" returns successfully" Jul 10 00:47:50.696000 audit[4402]: AVC avc: denied { getattr } for pid=4402 comm="coredns" path="cgroup:[4026532674]" dev="nsfs" ino=4026532674 scontext=system_u:system_r:svirt_lxc_net_t:s0:c621,c903 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:47:50.696000 audit[4402]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aac8 a2=c000491a38 a3=0 items=0 ppid=4350 pid=4402 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c621,c903 key=(null) Jul 10 00:47:50.696000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:47:51.353035 kubelet[1964]: E0710 00:47:51.352987 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:51.353649 kubelet[1964]: E0710 00:47:51.353557 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:51.364696 kubelet[1964]: I0710 00:47:51.364639 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-c5stg" podStartSLOduration=35.364624246 podStartE2EDuration="35.364624246s" podCreationTimestamp="2025-07-10 00:47:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:47:51.362339107 +0000 UTC m=+41.216231566" watchObservedRunningTime="2025-07-10 00:47:51.364624246 +0000 UTC m=+41.218516705" Jul 10 00:47:51.389000 audit[4430]: NETFILTER_CFG table=filter:117 family=2 entries=12 op=nft_register_rule pid=4430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:51.389000 audit[4430]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe8f704c80 a2=0 a3=7ffe8f704c6c items=0 ppid=2118 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:51.389000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:51.404000 audit[4430]: NETFILTER_CFG table=nat:118 family=2 entries=58 op=nft_register_chain pid=4430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:51.404000 audit[4430]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7ffe8f704c80 a2=0 a3=7ffe8f704c6c items=0 ppid=2118 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:51.404000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:51.781590 systemd-networkd[1029]: cali65510ccd19a: Gained IPv6LL Jul 10 00:47:51.845512 systemd-networkd[1029]: califbb2b2cc2d5: Gained IPv6LL Jul 10 00:47:52.233232 env[1209]: time="2025-07-10T00:47:52.233187534Z" level=info msg="StopPodSandbox for \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\"" Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.270 [INFO][4445] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.270 [INFO][4445] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" iface="eth0" netns="/var/run/netns/cni-0a862e35-fd17-f291-eeba-9b43da0c3b34" Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.271 [INFO][4445] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" iface="eth0" netns="/var/run/netns/cni-0a862e35-fd17-f291-eeba-9b43da0c3b34" Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.271 [INFO][4445] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" iface="eth0" netns="/var/run/netns/cni-0a862e35-fd17-f291-eeba-9b43da0c3b34" Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.271 [INFO][4445] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.271 [INFO][4445] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.290 [INFO][4454] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" HandleID="k8s-pod-network.5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.290 [INFO][4454] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.290 [INFO][4454] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.297 [WARNING][4454] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" HandleID="k8s-pod-network.5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.297 [INFO][4454] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" HandleID="k8s-pod-network.5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.298 [INFO][4454] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:52.302531 env[1209]: 2025-07-10 00:47:52.300 [INFO][4445] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:47:52.305497 systemd[1]: run-netns-cni\x2d0a862e35\x2dfd17\x2df291\x2deeba\x2d9b43da0c3b34.mount: Deactivated successfully. Jul 10 00:47:52.306231 env[1209]: time="2025-07-10T00:47:52.306193281Z" level=info msg="TearDown network for sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\" successfully" Jul 10 00:47:52.306286 env[1209]: time="2025-07-10T00:47:52.306230422Z" level=info msg="StopPodSandbox for \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\" returns successfully" Jul 10 00:47:52.306936 env[1209]: time="2025-07-10T00:47:52.306900538Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bbc66c4f5-7cmjp,Uid:c52c6bb9-57dd-465e-a201-459c0e30980c,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:47:52.355914 kubelet[1964]: E0710 00:47:52.355585 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:52.421000 audit[4482]: NETFILTER_CFG table=filter:119 family=2 entries=12 op=nft_register_rule pid=4482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:52.421000 audit[4482]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffa2b23aa0 a2=0 a3=7fffa2b23a8c items=0 ppid=2118 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.421000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:52.426000 audit[4482]: NETFILTER_CFG table=nat:120 family=2 entries=22 op=nft_register_rule pid=4482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:52.426000 audit[4482]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7fffa2b23aa0 a2=0 a3=7fffa2b23a8c items=0 ppid=2118 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.426000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:52.427582 systemd-networkd[1029]: cali1da0dff7b50: Link UP Jul 10 00:47:52.430779 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:47:52.430831 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1da0dff7b50: link becomes ready Jul 10 00:47:52.429971 systemd-networkd[1029]: cali1da0dff7b50: Gained carrier Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.361 [INFO][4461] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0 calico-apiserver-bbc66c4f5- calico-apiserver c52c6bb9-57dd-465e-a201-459c0e30980c 1119 0 2025-07-10 00:47:24 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:bbc66c4f5 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-bbc66c4f5-7cmjp eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali1da0dff7b50 [] [] }} ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-7cmjp" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.361 [INFO][4461] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-7cmjp" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.387 [INFO][4474] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" HandleID="k8s-pod-network.7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.387 [INFO][4474] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" HandleID="k8s-pod-network.7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004ee40), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-bbc66c4f5-7cmjp", "timestamp":"2025-07-10 00:47:52.387292061 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.387 [INFO][4474] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.387 [INFO][4474] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.387 [INFO][4474] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.395 [INFO][4474] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" host="localhost" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.399 [INFO][4474] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.406 [INFO][4474] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.408 [INFO][4474] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.411 [INFO][4474] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.411 [INFO][4474] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" host="localhost" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.412 [INFO][4474] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.415 [INFO][4474] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" host="localhost" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.423 [INFO][4474] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" host="localhost" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.423 [INFO][4474] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" host="localhost" Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.423 [INFO][4474] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:47:52.445390 env[1209]: 2025-07-10 00:47:52.423 [INFO][4474] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" HandleID="k8s-pod-network.7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:47:52.446009 env[1209]: 2025-07-10 00:47:52.425 [INFO][4461] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-7cmjp" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0", GenerateName:"calico-apiserver-bbc66c4f5-", Namespace:"calico-apiserver", SelfLink:"", UID:"c52c6bb9-57dd-465e-a201-459c0e30980c", ResourceVersion:"1119", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bbc66c4f5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-bbc66c4f5-7cmjp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1da0dff7b50", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:52.446009 env[1209]: 2025-07-10 00:47:52.425 [INFO][4461] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-7cmjp" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:47:52.446009 env[1209]: 2025-07-10 00:47:52.425 [INFO][4461] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1da0dff7b50 ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-7cmjp" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:47:52.446009 env[1209]: 2025-07-10 00:47:52.430 [INFO][4461] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-7cmjp" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:47:52.446009 env[1209]: 2025-07-10 00:47:52.430 [INFO][4461] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-7cmjp" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0", GenerateName:"calico-apiserver-bbc66c4f5-", Namespace:"calico-apiserver", SelfLink:"", UID:"c52c6bb9-57dd-465e-a201-459c0e30980c", ResourceVersion:"1119", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bbc66c4f5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd", Pod:"calico-apiserver-bbc66c4f5-7cmjp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1da0dff7b50", MAC:"42:63:d1:59:e5:3b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:47:52.446009 env[1209]: 2025-07-10 00:47:52.442 [INFO][4461] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd" Namespace="calico-apiserver" Pod="calico-apiserver-bbc66c4f5-7cmjp" WorkloadEndpoint="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:47:52.749000 audit[4491]: NETFILTER_CFG table=filter:121 family=2 entries=57 op=nft_register_chain pid=4491 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:47:52.749000 audit[4491]: SYSCALL arch=c000003e syscall=46 success=yes exit=27812 a0=3 a1=7fffd3406c50 a2=0 a3=7fffd3406c3c items=0 ppid=3388 pid=4491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.749000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:47:52.826128 env[1209]: time="2025-07-10T00:47:52.826049357Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:47:52.826128 env[1209]: time="2025-07-10T00:47:52.826097689Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:47:52.826128 env[1209]: time="2025-07-10T00:47:52.826108559Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:47:52.826454 env[1209]: time="2025-07-10T00:47:52.826287878Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd pid=4499 runtime=io.containerd.runc.v2 Jul 10 00:47:52.841825 systemd[1]: Started cri-containerd-7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd.scope. Jul 10 00:47:52.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit: BPF prog-id=202 op=LOAD Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4499 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764353763623436386136373864343561396638333133373731316638 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4499 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764353763623436386136373864343561396638333133373731316638 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.851000 audit: BPF prog-id=203 op=LOAD Jul 10 00:47:52.851000 audit[4508]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030d200 items=0 ppid=4499 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764353763623436386136373864343561396638333133373731316638 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit: BPF prog-id=204 op=LOAD Jul 10 00:47:52.852000 audit[4508]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030d248 items=0 ppid=4499 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764353763623436386136373864343561396638333133373731316638 Jul 10 00:47:52.852000 audit: BPF prog-id=204 op=UNLOAD Jul 10 00:47:52.852000 audit: BPF prog-id=203 op=UNLOAD Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { perfmon } for pid=4508 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit[4508]: AVC avc: denied { bpf } for pid=4508 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.852000 audit: BPF prog-id=205 op=LOAD Jul 10 00:47:52.852000 audit[4508]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030d658 items=0 ppid=4499 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.852000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764353763623436386136373864343561396638333133373731316638 Jul 10 00:47:52.853331 systemd-resolved[1149]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:47:52.873394 env[1209]: time="2025-07-10T00:47:52.873336855Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bbc66c4f5-7cmjp,Uid:c52c6bb9-57dd-465e-a201-459c0e30980c,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd\"" Jul 10 00:47:52.899032 env[1209]: time="2025-07-10T00:47:52.898982447Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:52.901458 env[1209]: time="2025-07-10T00:47:52.901398432Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:52.903056 env[1209]: time="2025-07-10T00:47:52.903017722Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:52.904859 env[1209]: time="2025-07-10T00:47:52.904805009Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:52.905045 env[1209]: time="2025-07-10T00:47:52.905005438Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 10 00:47:52.906275 env[1209]: time="2025-07-10T00:47:52.906244830Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 10 00:47:52.916709 env[1209]: time="2025-07-10T00:47:52.916667826Z" level=info msg="CreateContainer within sandbox \"63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 10 00:47:52.931359 env[1209]: time="2025-07-10T00:47:52.931309103Z" level=info msg="CreateContainer within sandbox \"63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"b2a89ecc3f808d96c356ebbe1557e2c632e5d29ced1109a628c2a9d46fa4e42b\"" Jul 10 00:47:52.931962 env[1209]: time="2025-07-10T00:47:52.931932551Z" level=info msg="StartContainer for \"b2a89ecc3f808d96c356ebbe1557e2c632e5d29ced1109a628c2a9d46fa4e42b\"" Jul 10 00:47:52.946994 systemd[1]: Started cri-containerd-b2a89ecc3f808d96c356ebbe1557e2c632e5d29ced1109a628c2a9d46fa4e42b.scope. Jul 10 00:47:52.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit: BPF prog-id=206 op=LOAD Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3840 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232613839656363336638303864393663333536656262653135353765 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3840 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232613839656363336638303864393663333536656262653135353765 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit: BPF prog-id=207 op=LOAD Jul 10 00:47:52.958000 audit[4542]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000323950 items=0 ppid=3840 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232613839656363336638303864393663333536656262653135353765 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit: BPF prog-id=208 op=LOAD Jul 10 00:47:52.958000 audit[4542]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000323998 items=0 ppid=3840 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232613839656363336638303864393663333536656262653135353765 Jul 10 00:47:52.958000 audit: BPF prog-id=208 op=UNLOAD Jul 10 00:47:52.958000 audit: BPF prog-id=207 op=UNLOAD Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { perfmon } for pid=4542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit[4542]: AVC avc: denied { bpf } for pid=4542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:52.958000 audit: BPF prog-id=209 op=LOAD Jul 10 00:47:52.958000 audit[4542]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000323da8 items=0 ppid=3840 pid=4542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:52.958000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232613839656363336638303864393663333536656262653135353765 Jul 10 00:47:53.187191 env[1209]: time="2025-07-10T00:47:53.187137511Z" level=info msg="StartContainer for \"b2a89ecc3f808d96c356ebbe1557e2c632e5d29ced1109a628c2a9d46fa4e42b\" returns successfully" Jul 10 00:47:53.360759 kubelet[1964]: E0710 00:47:53.360720 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:47:53.372491 kubelet[1964]: I0710 00:47:53.372271 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6fb9d69dc5-lhdbl" podStartSLOduration=22.994627264000002 podStartE2EDuration="27.372252985s" podCreationTimestamp="2025-07-10 00:47:26 +0000 UTC" firstStartedPulling="2025-07-10 00:47:48.528333249 +0000 UTC m=+38.382225708" lastFinishedPulling="2025-07-10 00:47:52.90595897 +0000 UTC m=+42.759851429" observedRunningTime="2025-07-10 00:47:53.371824396 +0000 UTC m=+43.225716855" watchObservedRunningTime="2025-07-10 00:47:53.372252985 +0000 UTC m=+43.226145434" Jul 10 00:47:53.830929 systemd-networkd[1029]: cali1da0dff7b50: Gained IPv6LL Jul 10 00:47:55.217762 systemd[1]: Started sshd@9-10.0.0.138:22-10.0.0.1:51050.service. Jul 10 00:47:55.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.138:22-10.0.0.1:51050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:55.218871 kernel: kauditd_printk_skb: 445 callbacks suppressed Jul 10 00:47:55.218932 kernel: audit: type=1130 audit(1752108475.217:1377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.138:22-10.0.0.1:51050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:55.254000 audit[4603]: USER_ACCT pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.255430 sshd[4603]: Accepted publickey for core from 10.0.0.1 port 51050 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:47:55.264625 kernel: audit: type=1101 audit(1752108475.254:1378): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.264700 kernel: audit: type=1103 audit(1752108475.258:1379): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.264723 kernel: audit: type=1006 audit(1752108475.258:1380): pid=4603 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 10 00:47:55.268735 kernel: audit: type=1300 audit(1752108475.258:1380): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6bf7ca70 a2=3 a3=0 items=0 ppid=1 pid=4603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:55.258000 audit[4603]: CRED_ACQ pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.258000 audit[4603]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6bf7ca70 a2=3 a3=0 items=0 ppid=1 pid=4603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:55.263437 systemd-logind[1196]: New session 10 of user core. Jul 10 00:47:55.259436 sshd[4603]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:47:55.263820 systemd[1]: Started session-10.scope. Jul 10 00:47:55.258000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:47:55.267000 audit[4603]: USER_START pid=4603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.274748 kernel: audit: type=1327 audit(1752108475.258:1380): proctitle=737368643A20636F7265205B707269765D Jul 10 00:47:55.274788 kernel: audit: type=1105 audit(1752108475.267:1381): pid=4603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.274814 kernel: audit: type=1103 audit(1752108475.268:1382): pid=4605 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.268000 audit[4605]: CRED_ACQ pid=4605 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.422943 sshd[4603]: pam_unix(sshd:session): session closed for user core Jul 10 00:47:55.423000 audit[4603]: USER_END pid=4603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.431593 kernel: audit: type=1106 audit(1752108475.423:1383): pid=4603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.431643 kernel: audit: type=1104 audit(1752108475.423:1384): pid=4603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.423000 audit[4603]: CRED_DISP pid=4603 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.138:22-10.0.0.1:51058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:55.429207 systemd[1]: Started sshd@10-10.0.0.138:22-10.0.0.1:51058.service. Jul 10 00:47:55.433000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.138:22-10.0.0.1:51050 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:55.433415 systemd[1]: sshd@9-10.0.0.138:22-10.0.0.1:51050.service: Deactivated successfully. Jul 10 00:47:55.434784 systemd[1]: session-10.scope: Deactivated successfully. Jul 10 00:47:55.436157 systemd-logind[1196]: Session 10 logged out. Waiting for processes to exit. Jul 10 00:47:55.436954 systemd-logind[1196]: Removed session 10. Jul 10 00:47:55.462000 audit[4616]: USER_ACCT pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.463278 sshd[4616]: Accepted publickey for core from 10.0.0.1 port 51058 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:47:55.463000 audit[4616]: CRED_ACQ pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.463000 audit[4616]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedd0222d0 a2=3 a3=0 items=0 ppid=1 pid=4616 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:55.463000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:47:55.464446 sshd[4616]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:47:55.467845 systemd-logind[1196]: New session 11 of user core. Jul 10 00:47:55.468924 systemd[1]: Started session-11.scope. Jul 10 00:47:55.473000 audit[4616]: USER_START pid=4616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.474000 audit[4619]: CRED_ACQ pid=4619 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.627762 sshd[4616]: pam_unix(sshd:session): session closed for user core Jul 10 00:47:55.630853 systemd[1]: Started sshd@11-10.0.0.138:22-10.0.0.1:51064.service. Jul 10 00:47:55.630000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.138:22-10.0.0.1:51064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:55.631000 audit[4616]: USER_END pid=4616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.631000 audit[4616]: CRED_DISP pid=4616 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.138:22-10.0.0.1:51058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:55.644108 systemd[1]: sshd@10-10.0.0.138:22-10.0.0.1:51058.service: Deactivated successfully. Jul 10 00:47:55.644839 systemd[1]: session-11.scope: Deactivated successfully. Jul 10 00:47:55.647413 systemd-logind[1196]: Session 11 logged out. Waiting for processes to exit. Jul 10 00:47:55.648204 systemd-logind[1196]: Removed session 11. Jul 10 00:47:55.674000 audit[4628]: USER_ACCT pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.675484 sshd[4628]: Accepted publickey for core from 10.0.0.1 port 51064 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:47:55.675000 audit[4628]: CRED_ACQ pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.675000 audit[4628]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbe5e95a0 a2=3 a3=0 items=0 ppid=1 pid=4628 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:55.675000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:47:55.676618 sshd[4628]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:47:55.679811 systemd-logind[1196]: New session 12 of user core. Jul 10 00:47:55.680644 systemd[1]: Started session-12.scope. Jul 10 00:47:55.683000 audit[4628]: USER_START pid=4628 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.684000 audit[4631]: CRED_ACQ pid=4631 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.722723 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount530825690.mount: Deactivated successfully. Jul 10 00:47:55.873790 sshd[4628]: pam_unix(sshd:session): session closed for user core Jul 10 00:47:55.874000 audit[4628]: USER_END pid=4628 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.874000 audit[4628]: CRED_DISP pid=4628 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:47:55.876437 systemd[1]: sshd@11-10.0.0.138:22-10.0.0.1:51064.service: Deactivated successfully. Jul 10 00:47:55.877216 systemd[1]: session-12.scope: Deactivated successfully. Jul 10 00:47:55.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.138:22-10.0.0.1:51064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:47:55.878040 systemd-logind[1196]: Session 12 logged out. Waiting for processes to exit. Jul 10 00:47:55.878725 systemd-logind[1196]: Removed session 12. Jul 10 00:47:56.830348 env[1209]: time="2025-07-10T00:47:56.830268874Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:56.832218 env[1209]: time="2025-07-10T00:47:56.832172700Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:56.833803 env[1209]: time="2025-07-10T00:47:56.833771850Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:56.835095 env[1209]: time="2025-07-10T00:47:56.835072927Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:56.835536 env[1209]: time="2025-07-10T00:47:56.835512548Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 10 00:47:56.837194 env[1209]: time="2025-07-10T00:47:56.836851276Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:47:56.840506 env[1209]: time="2025-07-10T00:47:56.840462366Z" level=info msg="CreateContainer within sandbox \"bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 10 00:47:56.853674 env[1209]: time="2025-07-10T00:47:56.853645273Z" level=info msg="CreateContainer within sandbox \"bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"d0737c1d720ae626d48694a6b740b0aa64d11f02c264d046f2c48993fc8c9d8f\"" Jul 10 00:47:56.855028 env[1209]: time="2025-07-10T00:47:56.854032926Z" level=info msg="StartContainer for \"d0737c1d720ae626d48694a6b740b0aa64d11f02c264d046f2c48993fc8c9d8f\"" Jul 10 00:47:56.870394 systemd[1]: Started cri-containerd-d0737c1d720ae626d48694a6b740b0aa64d11f02c264d046f2c48993fc8c9d8f.scope. Jul 10 00:47:56.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.880000 audit: BPF prog-id=210 op=LOAD Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3891 pid=4656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:56.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430373337633164373230616536323664343836393461366237343062 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3891 pid=4656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:56.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430373337633164373230616536323664343836393461366237343062 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit: BPF prog-id=211 op=LOAD Jul 10 00:47:56.881000 audit[4656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000300500 items=0 ppid=3891 pid=4656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:56.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430373337633164373230616536323664343836393461366237343062 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit: BPF prog-id=212 op=LOAD Jul 10 00:47:56.881000 audit[4656]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000300548 items=0 ppid=3891 pid=4656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:56.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430373337633164373230616536323664343836393461366237343062 Jul 10 00:47:56.881000 audit: BPF prog-id=212 op=UNLOAD Jul 10 00:47:56.881000 audit: BPF prog-id=211 op=UNLOAD Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { perfmon } for pid=4656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit[4656]: AVC avc: denied { bpf } for pid=4656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:47:56.881000 audit: BPF prog-id=213 op=LOAD Jul 10 00:47:56.881000 audit[4656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000300958 items=0 ppid=3891 pid=4656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:56.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430373337633164373230616536323664343836393461366237343062 Jul 10 00:47:56.934645 env[1209]: time="2025-07-10T00:47:56.934580611Z" level=info msg="StartContainer for \"d0737c1d720ae626d48694a6b740b0aa64d11f02c264d046f2c48993fc8c9d8f\" returns successfully" Jul 10 00:47:57.526000 audit[4689]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=4689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:57.526000 audit[4689]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffeabb86090 a2=0 a3=7ffeabb8607c items=0 ppid=2118 pid=4689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:57.526000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:57.530000 audit[4689]: NETFILTER_CFG table=nat:123 family=2 entries=22 op=nft_register_rule pid=4689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:47:57.530000 audit[4689]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffeabb86090 a2=0 a3=7ffeabb8607c items=0 ppid=2118 pid=4689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:47:57.530000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:47:58.371180 kubelet[1964]: I0710 00:47:58.370246 1964 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:47:59.923864 env[1209]: time="2025-07-10T00:47:59.923810076Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:59.925938 env[1209]: time="2025-07-10T00:47:59.925898479Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:59.927853 env[1209]: time="2025-07-10T00:47:59.927803496Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:59.929324 env[1209]: time="2025-07-10T00:47:59.929283781Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:47:59.929693 env[1209]: time="2025-07-10T00:47:59.929664099Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 00:47:59.931037 env[1209]: time="2025-07-10T00:47:59.931007315Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 10 00:47:59.935182 env[1209]: time="2025-07-10T00:47:59.935153473Z" level=info msg="CreateContainer within sandbox \"bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:47:59.948385 env[1209]: time="2025-07-10T00:47:59.948333337Z" level=info msg="CreateContainer within sandbox \"bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"c3f0acacae6eff334527f5e6968686aea2116b1d7d0495503826d30eb3462593\"" Jul 10 00:47:59.949253 env[1209]: time="2025-07-10T00:47:59.949209591Z" level=info msg="StartContainer for \"c3f0acacae6eff334527f5e6968686aea2116b1d7d0495503826d30eb3462593\"" Jul 10 00:47:59.971702 systemd[1]: Started cri-containerd-c3f0acacae6eff334527f5e6968686aea2116b1d7d0495503826d30eb3462593.scope. Jul 10 00:48:00.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit: BPF prog-id=214 op=LOAD Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4088 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:00.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333663061636163616536656666333334353237663565363936383638 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4088 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:00.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333663061636163616536656666333334353237663565363936383638 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.001000 audit: BPF prog-id=215 op=LOAD Jul 10 00:48:00.001000 audit[4700]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030c9e0 items=0 ppid=4088 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:00.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333663061636163616536656666333334353237663565363936383638 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit: BPF prog-id=216 op=LOAD Jul 10 00:48:00.002000 audit[4700]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030ca28 items=0 ppid=4088 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:00.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333663061636163616536656666333334353237663565363936383638 Jul 10 00:48:00.002000 audit: BPF prog-id=216 op=UNLOAD Jul 10 00:48:00.002000 audit: BPF prog-id=215 op=UNLOAD Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:00.002000 audit: BPF prog-id=217 op=LOAD Jul 10 00:48:00.002000 audit[4700]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030ce38 items=0 ppid=4088 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:00.002000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333663061636163616536656666333334353237663565363936383638 Jul 10 00:48:00.356150 env[1209]: time="2025-07-10T00:48:00.356100858Z" level=info msg="StartContainer for \"c3f0acacae6eff334527f5e6968686aea2116b1d7d0495503826d30eb3462593\" returns successfully" Jul 10 00:48:00.390540 kubelet[1964]: I0710 00:48:00.390472 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-2rwwm" podStartSLOduration=26.186364738 podStartE2EDuration="34.386891756s" podCreationTimestamp="2025-07-10 00:47:26 +0000 UTC" firstStartedPulling="2025-07-10 00:47:48.635768278 +0000 UTC m=+38.489660737" lastFinishedPulling="2025-07-10 00:47:56.836295306 +0000 UTC m=+46.690187755" observedRunningTime="2025-07-10 00:47:57.513653719 +0000 UTC m=+47.367546168" watchObservedRunningTime="2025-07-10 00:48:00.386891756 +0000 UTC m=+50.240784226" Jul 10 00:48:00.391425 kubelet[1964]: I0710 00:48:00.390802 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-bbc66c4f5-72mzq" podStartSLOduration=26.086246273 podStartE2EDuration="36.390791408s" podCreationTimestamp="2025-07-10 00:47:24 +0000 UTC" firstStartedPulling="2025-07-10 00:47:49.626317027 +0000 UTC m=+39.480209486" lastFinishedPulling="2025-07-10 00:47:59.930862162 +0000 UTC m=+49.784754621" observedRunningTime="2025-07-10 00:48:00.386706637 +0000 UTC m=+50.240599096" watchObservedRunningTime="2025-07-10 00:48:00.390791408 +0000 UTC m=+50.244683867" Jul 10 00:48:00.403460 kernel: kauditd_printk_skb: 143 callbacks suppressed Jul 10 00:48:00.403610 kernel: audit: type=1325 audit(1752108480.400:1442): table=filter:124 family=2 entries=12 op=nft_register_rule pid=4734 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:00.400000 audit[4734]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4734 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:00.400000 audit[4734]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdb0ad94a0 a2=0 a3=7ffdb0ad948c items=0 ppid=2118 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:00.409213 kernel: audit: type=1300 audit(1752108480.400:1442): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdb0ad94a0 a2=0 a3=7ffdb0ad948c items=0 ppid=2118 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:00.409280 kernel: audit: type=1327 audit(1752108480.400:1442): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:00.400000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:00.414000 audit[4734]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=4734 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:00.414000 audit[4734]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffdb0ad94a0 a2=0 a3=7ffdb0ad948c items=0 ppid=2118 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:00.422578 kernel: audit: type=1325 audit(1752108480.414:1443): table=nat:125 family=2 entries=22 op=nft_register_rule pid=4734 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:00.422631 kernel: audit: type=1300 audit(1752108480.414:1443): arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffdb0ad94a0 a2=0 a3=7ffdb0ad948c items=0 ppid=2118 pid=4734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:00.414000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:00.425007 kernel: audit: type=1327 audit(1752108480.414:1443): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:00.878118 systemd[1]: Started sshd@12-10.0.0.138:22-10.0.0.1:54590.service. Jul 10 00:48:00.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.138:22-10.0.0.1:54590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:00.882398 kernel: audit: type=1130 audit(1752108480.877:1444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.138:22-10.0.0.1:54590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:00.918000 audit[4736]: USER_ACCT pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:00.923054 sshd[4736]: Accepted publickey for core from 10.0.0.1 port 54590 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:00.923404 kernel: audit: type=1101 audit(1752108480.918:1445): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:00.924000 audit[4736]: CRED_ACQ pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:00.928410 kernel: audit: type=1103 audit(1752108480.924:1446): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:00.927000 audit[4736]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0fe437b0 a2=3 a3=0 items=0 ppid=1 pid=4736 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:00.927000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:00.931126 sshd[4736]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:00.931531 kernel: audit: type=1006 audit(1752108480.927:1447): pid=4736 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 10 00:48:00.936554 systemd[1]: Started session-13.scope. Jul 10 00:48:00.937452 systemd-logind[1196]: New session 13 of user core. Jul 10 00:48:00.942000 audit[4736]: USER_START pid=4736 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:00.944000 audit[4738]: CRED_ACQ pid=4738 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.152812 sshd[4736]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:01.153000 audit[4736]: USER_END pid=4736 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.153000 audit[4736]: CRED_DISP pid=4736 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:01.155263 systemd[1]: sshd@12-10.0.0.138:22-10.0.0.1:54590.service: Deactivated successfully. Jul 10 00:48:01.156197 systemd[1]: session-13.scope: Deactivated successfully. Jul 10 00:48:01.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.138:22-10.0.0.1:54590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:01.156900 systemd-logind[1196]: Session 13 logged out. Waiting for processes to exit. Jul 10 00:48:01.157810 systemd-logind[1196]: Removed session 13. Jul 10 00:48:02.075867 env[1209]: time="2025-07-10T00:48:02.075816420Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:02.078803 env[1209]: time="2025-07-10T00:48:02.078440162Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:02.080815 env[1209]: time="2025-07-10T00:48:02.080778977Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:02.082706 env[1209]: time="2025-07-10T00:48:02.082663123Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:02.083232 env[1209]: time="2025-07-10T00:48:02.083186331Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 10 00:48:02.084515 env[1209]: time="2025-07-10T00:48:02.084487306Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:48:02.088269 env[1209]: time="2025-07-10T00:48:02.088232264Z" level=info msg="CreateContainer within sandbox \"f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 10 00:48:02.109430 env[1209]: time="2025-07-10T00:48:02.108239709Z" level=info msg="CreateContainer within sandbox \"f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"74440b82e3880e8ef55b4032ab604f95fa3cebf1eec87f7802f0d80d2d8bd720\"" Jul 10 00:48:02.109430 env[1209]: time="2025-07-10T00:48:02.109046953Z" level=info msg="StartContainer for \"74440b82e3880e8ef55b4032ab604f95fa3cebf1eec87f7802f0d80d2d8bd720\"" Jul 10 00:48:02.137279 systemd[1]: run-containerd-runc-k8s.io-74440b82e3880e8ef55b4032ab604f95fa3cebf1eec87f7802f0d80d2d8bd720-runc.5gmbpM.mount: Deactivated successfully. Jul 10 00:48:02.141636 systemd[1]: Started cri-containerd-74440b82e3880e8ef55b4032ab604f95fa3cebf1eec87f7802f0d80d2d8bd720.scope. Jul 10 00:48:02.154000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.154000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fd07b83b2f8 items=0 ppid=4300 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734343430623832653338383065386566353562343033326162363034 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit: BPF prog-id=218 op=LOAD Jul 10 00:48:02.155000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000024408 items=0 ppid=4300 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734343430623832653338383065386566353562343033326162363034 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit: BPF prog-id=219 op=LOAD Jul 10 00:48:02.155000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000024458 items=0 ppid=4300 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734343430623832653338383065386566353562343033326162363034 Jul 10 00:48:02.155000 audit: BPF prog-id=219 op=UNLOAD Jul 10 00:48:02.155000 audit: BPF prog-id=218 op=UNLOAD Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.155000 audit: BPF prog-id=220 op=LOAD Jul 10 00:48:02.155000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000244e8 items=0 ppid=4300 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734343430623832653338383065386566353562343033326162363034 Jul 10 00:48:02.218369 env[1209]: time="2025-07-10T00:48:02.218313225Z" level=info msg="StartContainer for \"74440b82e3880e8ef55b4032ab604f95fa3cebf1eec87f7802f0d80d2d8bd720\" returns successfully" Jul 10 00:48:02.380120 kubelet[1964]: I0710 00:48:02.380012 1964 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:48:02.446000 audit[4711]: AVC avc: denied { watch } for pid=4711 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_47_36.4194397200/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c582,c772 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c582,c772 tclass=file permissive=0 Jul 10 00:48:02.446000 audit[4711]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00251e3e0 a2=fc6 a3=0 items=0 ppid=4088 pid=4711 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c582,c772 key=(null) Jul 10 00:48:02.446000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:48:02.479821 env[1209]: time="2025-07-10T00:48:02.479781951Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:02.483432 env[1209]: time="2025-07-10T00:48:02.483401003Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:02.485527 env[1209]: time="2025-07-10T00:48:02.485504904Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:02.487491 env[1209]: time="2025-07-10T00:48:02.487469331Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:02.487763 env[1209]: time="2025-07-10T00:48:02.487739813Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 00:48:02.489780 env[1209]: time="2025-07-10T00:48:02.489759284Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 10 00:48:02.491000 audit[4788]: NETFILTER_CFG table=filter:126 family=2 entries=11 op=nft_register_rule pid=4788 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:02.491000 audit[4788]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffdea8ba080 a2=0 a3=7ffdea8ba06c items=0 ppid=2118 pid=4788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.491000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:02.493622 env[1209]: time="2025-07-10T00:48:02.493578833Z" level=info msg="CreateContainer within sandbox \"7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:48:02.498000 audit[4788]: NETFILTER_CFG table=nat:127 family=2 entries=29 op=nft_register_chain pid=4788 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:02.498000 audit[4788]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffdea8ba080 a2=0 a3=7ffdea8ba06c items=0 ppid=2118 pid=4788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.498000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:02.507933 env[1209]: time="2025-07-10T00:48:02.507874827Z" level=info msg="CreateContainer within sandbox \"7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"fc9bbaca88710dad3dec8dccb697667289651dc2ef9ffb27bf7c856b4ce715d6\"" Jul 10 00:48:02.508461 env[1209]: time="2025-07-10T00:48:02.508433261Z" level=info msg="StartContainer for \"fc9bbaca88710dad3dec8dccb697667289651dc2ef9ffb27bf7c856b4ce715d6\"" Jul 10 00:48:02.531116 systemd[1]: Started cri-containerd-fc9bbaca88710dad3dec8dccb697667289651dc2ef9ffb27bf7c856b4ce715d6.scope. Jul 10 00:48:02.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.579000 audit: BPF prog-id=221 op=LOAD Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=4499 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396262616361383837313064616433646563386463636236393736 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=4499 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396262616361383837313064616433646563386463636236393736 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.580000 audit: BPF prog-id=222 op=LOAD Jul 10 00:48:02.580000 audit[4796]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0002639f0 items=0 ppid=4499 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396262616361383837313064616433646563386463636236393736 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit: BPF prog-id=223 op=LOAD Jul 10 00:48:02.581000 audit[4796]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000263a38 items=0 ppid=4499 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396262616361383837313064616433646563386463636236393736 Jul 10 00:48:02.581000 audit: BPF prog-id=223 op=UNLOAD Jul 10 00:48:02.581000 audit: BPF prog-id=222 op=UNLOAD Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { perfmon } for pid=4796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit[4796]: AVC avc: denied { bpf } for pid=4796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:02.581000 audit: BPF prog-id=224 op=LOAD Jul 10 00:48:02.581000 audit[4796]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000263e48 items=0 ppid=4499 pid=4796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:02.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6663396262616361383837313064616433646563386463636236393736 Jul 10 00:48:02.613067 env[1209]: time="2025-07-10T00:48:02.613022535Z" level=info msg="StartContainer for \"fc9bbaca88710dad3dec8dccb697667289651dc2ef9ffb27bf7c856b4ce715d6\" returns successfully" Jul 10 00:48:03.403000 audit[4833]: NETFILTER_CFG table=filter:128 family=2 entries=10 op=nft_register_rule pid=4833 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:03.403000 audit[4833]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff72d0d1e0 a2=0 a3=7fff72d0d1cc items=0 ppid=2118 pid=4833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.403000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:03.410000 audit[4833]: NETFILTER_CFG table=nat:129 family=2 entries=32 op=nft_register_rule pid=4833 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:03.410000 audit[4833]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fff72d0d1e0 a2=0 a3=7fff72d0d1cc items=0 ppid=2118 pid=4833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:03.410000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:03.439000 audit[4807]: AVC avc: denied { watch } for pid=4807 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_47_36.1038698581/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c77,c294 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c77,c294 tclass=file permissive=0 Jul 10 00:48:03.439000 audit[4807]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c2200 a2=fc6 a3=0 items=0 ppid=4499 pid=4807 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c77,c294 key=(null) Jul 10 00:48:03.439000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:48:03.452822 kubelet[1964]: I0710 00:48:03.452632 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-bbc66c4f5-7cmjp" podStartSLOduration=29.837894709 podStartE2EDuration="39.452614853s" podCreationTimestamp="2025-07-10 00:47:24 +0000 UTC" firstStartedPulling="2025-07-10 00:47:52.874273455 +0000 UTC m=+42.728165904" lastFinishedPulling="2025-07-10 00:48:02.488993589 +0000 UTC m=+52.342886048" observedRunningTime="2025-07-10 00:48:03.393228539 +0000 UTC m=+53.247120998" watchObservedRunningTime="2025-07-10 00:48:03.452614853 +0000 UTC m=+53.306507312" Jul 10 00:48:04.158764 env[1209]: time="2025-07-10T00:48:04.158704021Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:04.160984 env[1209]: time="2025-07-10T00:48:04.160938298Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:04.162559 env[1209]: time="2025-07-10T00:48:04.162518430Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:04.164102 env[1209]: time="2025-07-10T00:48:04.164058156Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:48:04.164485 env[1209]: time="2025-07-10T00:48:04.164452460Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 10 00:48:04.168943 env[1209]: time="2025-07-10T00:48:04.168915353Z" level=info msg="CreateContainer within sandbox \"f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 10 00:48:04.183203 env[1209]: time="2025-07-10T00:48:04.183144577Z" level=info msg="CreateContainer within sandbox \"f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"87e9aeb63d4db1f19f8b90a2160eca116d12fe485ad8aed2ca9babdbcbca9f51\"" Jul 10 00:48:04.183586 env[1209]: time="2025-07-10T00:48:04.183557856Z" level=info msg="StartContainer for \"87e9aeb63d4db1f19f8b90a2160eca116d12fe485ad8aed2ca9babdbcbca9f51\"" Jul 10 00:48:04.203940 systemd[1]: Started cri-containerd-87e9aeb63d4db1f19f8b90a2160eca116d12fe485ad8aed2ca9babdbcbca9f51.scope. Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit[4842]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f060e70cc68 items=0 ppid=4300 pid=4842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837653961656236336434646231663139663862393061323136306563 Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.221000 audit: BPF prog-id=225 op=LOAD Jul 10 00:48:04.221000 audit[4842]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c00009ed98 items=0 ppid=4300 pid=4842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.221000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837653961656236336434646231663139663862393061323136306563 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit: BPF prog-id=226 op=LOAD Jul 10 00:48:04.222000 audit[4842]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c00009ede8 items=0 ppid=4300 pid=4842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837653961656236336434646231663139663862393061323136306563 Jul 10 00:48:04.222000 audit: BPF prog-id=226 op=UNLOAD Jul 10 00:48:04.222000 audit: BPF prog-id=225 op=UNLOAD Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { perfmon } for pid=4842 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit[4842]: AVC avc: denied { bpf } for pid=4842 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:48:04.222000 audit: BPF prog-id=227 op=LOAD Jul 10 00:48:04.222000 audit[4842]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c00009ee78 items=0 ppid=4300 pid=4842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.222000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837653961656236336434646231663139663862393061323136306563 Jul 10 00:48:04.235548 env[1209]: time="2025-07-10T00:48:04.235512156Z" level=info msg="StartContainer for \"87e9aeb63d4db1f19f8b90a2160eca116d12fe485ad8aed2ca9babdbcbca9f51\" returns successfully" Jul 10 00:48:04.327637 kubelet[1964]: I0710 00:48:04.327597 1964 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 10 00:48:04.329961 kubelet[1964]: I0710 00:48:04.329935 1964 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 10 00:48:04.423000 audit[4874]: NETFILTER_CFG table=filter:130 family=2 entries=10 op=nft_register_rule pid=4874 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:04.423000 audit[4874]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff0f707040 a2=0 a3=7fff0f70702c items=0 ppid=2118 pid=4874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.423000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:04.429000 audit[4874]: NETFILTER_CFG table=nat:131 family=2 entries=36 op=nft_register_chain pid=4874 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:04.429000 audit[4874]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fff0f707040 a2=0 a3=7fff0f70702c items=0 ppid=2118 pid=4874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:04.429000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:05.180053 systemd[1]: run-containerd-runc-k8s.io-87e9aeb63d4db1f19f8b90a2160eca116d12fe485ad8aed2ca9babdbcbca9f51-runc.IZiKYh.mount: Deactivated successfully. Jul 10 00:48:05.972660 kubelet[1964]: I0710 00:48:05.972607 1964 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:48:05.991551 systemd[1]: run-containerd-runc-k8s.io-d0737c1d720ae626d48694a6b740b0aa64d11f02c264d046f2c48993fc8c9d8f-runc.TwQQnf.mount: Deactivated successfully. Jul 10 00:48:06.093501 kubelet[1964]: I0710 00:48:06.093252 1964 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-dwxds" podStartSLOduration=26.441801535 podStartE2EDuration="40.093236805s" podCreationTimestamp="2025-07-10 00:47:26 +0000 UTC" firstStartedPulling="2025-07-10 00:47:50.513692575 +0000 UTC m=+40.367585034" lastFinishedPulling="2025-07-10 00:48:04.165127844 +0000 UTC m=+54.019020304" observedRunningTime="2025-07-10 00:48:04.406719794 +0000 UTC m=+54.260612243" watchObservedRunningTime="2025-07-10 00:48:06.093236805 +0000 UTC m=+55.947129264" Jul 10 00:48:06.108420 kernel: kauditd_printk_skb: 174 callbacks suppressed Jul 10 00:48:06.108567 kernel: audit: type=1325 audit(1752108486.105:1491): table=filter:132 family=2 entries=9 op=nft_register_rule pid=4909 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:06.105000 audit[4909]: NETFILTER_CFG table=filter:132 family=2 entries=9 op=nft_register_rule pid=4909 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:06.105000 audit[4909]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe31ceb860 a2=0 a3=7ffe31ceb84c items=0 ppid=2118 pid=4909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.114422 kernel: audit: type=1300 audit(1752108486.105:1491): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe31ceb860 a2=0 a3=7ffe31ceb84c items=0 ppid=2118 pid=4909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.114548 kernel: audit: type=1327 audit(1752108486.105:1491): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:06.105000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:06.118000 audit[4909]: NETFILTER_CFG table=nat:133 family=2 entries=31 op=nft_register_chain pid=4909 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:06.122418 kernel: audit: type=1325 audit(1752108486.118:1492): table=nat:133 family=2 entries=31 op=nft_register_chain pid=4909 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:06.118000 audit[4909]: SYSCALL arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffe31ceb860 a2=0 a3=7ffe31ceb84c items=0 ppid=2118 pid=4909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.129106 kernel: audit: type=1300 audit(1752108486.118:1492): arch=c000003e syscall=46 success=yes exit=10884 a0=3 a1=7ffe31ceb860 a2=0 a3=7ffe31ceb84c items=0 ppid=2118 pid=4909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.129254 kernel: audit: type=1327 audit(1752108486.118:1492): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:06.118000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:06.157585 systemd[1]: Started sshd@13-10.0.0.138:22-10.0.0.1:36932.service. Jul 10 00:48:06.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.138:22-10.0.0.1:36932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:06.163418 kernel: audit: type=1130 audit(1752108486.157:1493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.138:22-10.0.0.1:36932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:06.180027 systemd[1]: run-containerd-runc-k8s.io-d0737c1d720ae626d48694a6b740b0aa64d11f02c264d046f2c48993fc8c9d8f-runc.4ZPbHP.mount: Deactivated successfully. Jul 10 00:48:06.191000 audit[4924]: USER_ACCT pid=4924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:06.192397 sshd[4924]: Accepted publickey for core from 10.0.0.1 port 36932 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:06.195308 sshd[4924]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:06.194000 audit[4924]: CRED_ACQ pid=4924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:06.199014 systemd-logind[1196]: New session 14 of user core. Jul 10 00:48:06.199496 kernel: audit: type=1101 audit(1752108486.191:1494): pid=4924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:06.199531 kernel: audit: type=1103 audit(1752108486.194:1495): pid=4924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:06.199547 kernel: audit: type=1006 audit(1752108486.194:1496): pid=4924 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 10 00:48:06.199826 systemd[1]: Started session-14.scope. Jul 10 00:48:06.194000 audit[4924]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe84e4e550 a2=3 a3=0 items=0 ppid=1 pid=4924 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:06.194000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:06.203000 audit[4924]: USER_START pid=4924 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:06.204000 audit[4926]: CRED_ACQ pid=4926 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:06.486560 sshd[4924]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:06.487000 audit[4924]: USER_END pid=4924 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:06.487000 audit[4924]: CRED_DISP pid=4924 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:06.489167 systemd[1]: sshd@13-10.0.0.138:22-10.0.0.1:36932.service: Deactivated successfully. Jul 10 00:48:06.489000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.138:22-10.0.0.1:36932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:06.489931 systemd[1]: session-14.scope: Deactivated successfully. Jul 10 00:48:06.490704 systemd-logind[1196]: Session 14 logged out. Waiting for processes to exit. Jul 10 00:48:06.491486 systemd-logind[1196]: Removed session 14. Jul 10 00:48:07.104000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:07.104000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:07.104000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000844b70 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:48:07.104000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:07.104000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0008a51e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:48:07.104000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:07.464000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:07.464000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c00f1b3800 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:48:07.464000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:07.465000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:07.465000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c00fb0a360 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:48:07.465000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:07.466000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:07.466000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c00ea45e90 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:48:07.466000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:07.466000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6721 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:07.466000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c00fb0a3f0 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:48:07.466000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:07.505000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6725 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:07.505000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8b a1=c00e84f2f0 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:48:07.505000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:07.505000 audit[1802]: AVC avc: denied { watch } for pid=1802 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:07.505000 audit[1802]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8b a1=c00e898500 a2=fc6 a3=0 items=0 ppid=1657 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c109,c734 key=(null) Jul 10 00:48:07.505000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 10 00:48:10.222996 env[1209]: time="2025-07-10T00:48:10.222949447Z" level=info msg="StopPodSandbox for \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\"" Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.266 [WARNING][4953] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"44f4e572-f541-4255-a16c-ef3be90dc5fc", ResourceVersion:"1242", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59", Pod:"goldmane-768f4c5c69-2rwwm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calicf956d4bb03", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.266 [INFO][4953] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.266 [INFO][4953] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" iface="eth0" netns="" Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.267 [INFO][4953] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.267 [INFO][4953] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.287 [INFO][4964] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" HandleID="k8s-pod-network.244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.287 [INFO][4964] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.288 [INFO][4964] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.293 [WARNING][4964] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" HandleID="k8s-pod-network.244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.293 [INFO][4964] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" HandleID="k8s-pod-network.244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.295 [INFO][4964] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:10.300554 env[1209]: 2025-07-10 00:48:10.298 [INFO][4953] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:48:10.301084 env[1209]: time="2025-07-10T00:48:10.300571396Z" level=info msg="TearDown network for sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\" successfully" Jul 10 00:48:10.301084 env[1209]: time="2025-07-10T00:48:10.300602744Z" level=info msg="StopPodSandbox for \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\" returns successfully" Jul 10 00:48:10.301226 env[1209]: time="2025-07-10T00:48:10.301145028Z" level=info msg="RemovePodSandbox for \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\"" Jul 10 00:48:10.301226 env[1209]: time="2025-07-10T00:48:10.301168822Z" level=info msg="Forcibly stopping sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\"" Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.331 [WARNING][4982] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"44f4e572-f541-4255-a16c-ef3be90dc5fc", ResourceVersion:"1242", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bfa148860a34b090997d6ec9d961010dc28ab8fdcfcff27ac4a2347a5d8c4b59", Pod:"goldmane-768f4c5c69-2rwwm", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calicf956d4bb03", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.332 [INFO][4982] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.332 [INFO][4982] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" iface="eth0" netns="" Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.332 [INFO][4982] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.332 [INFO][4982] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.349 [INFO][4991] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" HandleID="k8s-pod-network.244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.349 [INFO][4991] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.350 [INFO][4991] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.357 [WARNING][4991] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" HandleID="k8s-pod-network.244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.357 [INFO][4991] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" HandleID="k8s-pod-network.244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Workload="localhost-k8s-goldmane--768f4c5c69--2rwwm-eth0" Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.359 [INFO][4991] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:10.363224 env[1209]: 2025-07-10 00:48:10.361 [INFO][4982] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27" Jul 10 00:48:10.363713 env[1209]: time="2025-07-10T00:48:10.363238570Z" level=info msg="TearDown network for sandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\" successfully" Jul 10 00:48:10.368543 env[1209]: time="2025-07-10T00:48:10.368503023Z" level=info msg="RemovePodSandbox \"244808e781ea14328ef18ac7fc953683635f2c19fb0172bb0ad10626c4e4ab27\" returns successfully" Jul 10 00:48:10.370446 env[1209]: time="2025-07-10T00:48:10.370370004Z" level=info msg="StopPodSandbox for \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\"" Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.408 [WARNING][5009] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0", GenerateName:"calico-apiserver-bbc66c4f5-", Namespace:"calico-apiserver", SelfLink:"", UID:"dc95b02f-1623-40c8-ae17-bd260422ebf1", ResourceVersion:"1206", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bbc66c4f5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d", Pod:"calico-apiserver-bbc66c4f5-72mzq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie6f4884f940", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.408 [INFO][5009] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.408 [INFO][5009] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" iface="eth0" netns="" Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.408 [INFO][5009] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.408 [INFO][5009] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.434 [INFO][5019] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" HandleID="k8s-pod-network.b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.434 [INFO][5019] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.434 [INFO][5019] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.440 [WARNING][5019] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" HandleID="k8s-pod-network.b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.440 [INFO][5019] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" HandleID="k8s-pod-network.b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.441 [INFO][5019] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:10.445724 env[1209]: 2025-07-10 00:48:10.444 [INFO][5009] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:48:10.446251 env[1209]: time="2025-07-10T00:48:10.445750825Z" level=info msg="TearDown network for sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\" successfully" Jul 10 00:48:10.446251 env[1209]: time="2025-07-10T00:48:10.445779720Z" level=info msg="StopPodSandbox for \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\" returns successfully" Jul 10 00:48:10.446437 env[1209]: time="2025-07-10T00:48:10.446370324Z" level=info msg="RemovePodSandbox for \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\"" Jul 10 00:48:10.446495 env[1209]: time="2025-07-10T00:48:10.446431880Z" level=info msg="Forcibly stopping sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\"" Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.476 [WARNING][5037] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0", GenerateName:"calico-apiserver-bbc66c4f5-", Namespace:"calico-apiserver", SelfLink:"", UID:"dc95b02f-1623-40c8-ae17-bd260422ebf1", ResourceVersion:"1206", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bbc66c4f5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bcc7fd07835829ebd2be351dafbf09eb8438a9a9c75106cc52071808d96b429d", Pod:"calico-apiserver-bbc66c4f5-72mzq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calie6f4884f940", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.477 [INFO][5037] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.477 [INFO][5037] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" iface="eth0" netns="" Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.477 [INFO][5037] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.477 [INFO][5037] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.495 [INFO][5045] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" HandleID="k8s-pod-network.b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.496 [INFO][5045] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.496 [INFO][5045] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.501 [WARNING][5045] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" HandleID="k8s-pod-network.b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.501 [INFO][5045] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" HandleID="k8s-pod-network.b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--72mzq-eth0" Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.502 [INFO][5045] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:10.506783 env[1209]: 2025-07-10 00:48:10.504 [INFO][5037] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0" Jul 10 00:48:10.506783 env[1209]: time="2025-07-10T00:48:10.506724526Z" level=info msg="TearDown network for sandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\" successfully" Jul 10 00:48:10.511858 env[1209]: time="2025-07-10T00:48:10.511808567Z" level=info msg="RemovePodSandbox \"b7385fef3e855c84e3139b56cf47a74a8b78dcf0dc8399de8af4825f3fedfde0\" returns successfully" Jul 10 00:48:10.512343 env[1209]: time="2025-07-10T00:48:10.512307989Z" level=info msg="StopPodSandbox for \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\"" Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.543 [WARNING][5064] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0", GenerateName:"calico-apiserver-bbc66c4f5-", Namespace:"calico-apiserver", SelfLink:"", UID:"c52c6bb9-57dd-465e-a201-459c0e30980c", ResourceVersion:"1224", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bbc66c4f5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd", Pod:"calico-apiserver-bbc66c4f5-7cmjp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1da0dff7b50", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.543 [INFO][5064] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.543 [INFO][5064] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" iface="eth0" netns="" Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.543 [INFO][5064] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.543 [INFO][5064] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.564 [INFO][5073] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" HandleID="k8s-pod-network.5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.564 [INFO][5073] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.564 [INFO][5073] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.569 [WARNING][5073] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" HandleID="k8s-pod-network.5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.569 [INFO][5073] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" HandleID="k8s-pod-network.5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.570 [INFO][5073] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:10.575249 env[1209]: 2025-07-10 00:48:10.573 [INFO][5064] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:48:10.575745 env[1209]: time="2025-07-10T00:48:10.575263037Z" level=info msg="TearDown network for sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\" successfully" Jul 10 00:48:10.575745 env[1209]: time="2025-07-10T00:48:10.575295589Z" level=info msg="StopPodSandbox for \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\" returns successfully" Jul 10 00:48:10.575830 env[1209]: time="2025-07-10T00:48:10.575806463Z" level=info msg="RemovePodSandbox for \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\"" Jul 10 00:48:10.575868 env[1209]: time="2025-07-10T00:48:10.575832422Z" level=info msg="Forcibly stopping sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\"" Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.604 [WARNING][5090] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0", GenerateName:"calico-apiserver-bbc66c4f5-", Namespace:"calico-apiserver", SelfLink:"", UID:"c52c6bb9-57dd-465e-a201-459c0e30980c", ResourceVersion:"1224", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bbc66c4f5", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7d57cb468a678d45a9f83137711f8bf34e96d0dde039bcf5f1d74fa52a9945cd", Pod:"calico-apiserver-bbc66c4f5-7cmjp", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali1da0dff7b50", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.605 [INFO][5090] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.605 [INFO][5090] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" iface="eth0" netns="" Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.605 [INFO][5090] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.605 [INFO][5090] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.626 [INFO][5098] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" HandleID="k8s-pod-network.5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.626 [INFO][5098] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.626 [INFO][5098] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.631 [WARNING][5098] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" HandleID="k8s-pod-network.5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.631 [INFO][5098] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" HandleID="k8s-pod-network.5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Workload="localhost-k8s-calico--apiserver--bbc66c4f5--7cmjp-eth0" Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.633 [INFO][5098] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:10.637212 env[1209]: 2025-07-10 00:48:10.635 [INFO][5090] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175" Jul 10 00:48:10.637866 env[1209]: time="2025-07-10T00:48:10.637230093Z" level=info msg="TearDown network for sandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\" successfully" Jul 10 00:48:10.641855 env[1209]: time="2025-07-10T00:48:10.641778653Z" level=info msg="RemovePodSandbox \"5f0c4b1be92e0a00f29f24192ea5281f746a69d78030a3429119306e31220175\" returns successfully" Jul 10 00:48:10.642747 env[1209]: time="2025-07-10T00:48:10.642690093Z" level=info msg="StopPodSandbox for \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\"" Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.674 [WARNING][5115] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--89d2r-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9", ResourceVersion:"1043", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb", Pod:"coredns-674b8bbfcf-89d2r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia803763b93a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.675 [INFO][5115] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.675 [INFO][5115] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" iface="eth0" netns="" Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.675 [INFO][5115] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.675 [INFO][5115] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.693 [INFO][5124] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" HandleID="k8s-pod-network.da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.694 [INFO][5124] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.694 [INFO][5124] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.699 [WARNING][5124] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" HandleID="k8s-pod-network.da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.699 [INFO][5124] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" HandleID="k8s-pod-network.da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.700 [INFO][5124] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:10.704751 env[1209]: 2025-07-10 00:48:10.702 [INFO][5115] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:48:10.705554 env[1209]: time="2025-07-10T00:48:10.704758529Z" level=info msg="TearDown network for sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\" successfully" Jul 10 00:48:10.705554 env[1209]: time="2025-07-10T00:48:10.704788385Z" level=info msg="StopPodSandbox for \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\" returns successfully" Jul 10 00:48:10.705554 env[1209]: time="2025-07-10T00:48:10.705303066Z" level=info msg="RemovePodSandbox for \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\"" Jul 10 00:48:10.705554 env[1209]: time="2025-07-10T00:48:10.705326861Z" level=info msg="Forcibly stopping sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\"" Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.734 [WARNING][5142] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--89d2r-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7a6b8eea-16ad-40b4-afaf-f5fa82aa05e9", ResourceVersion:"1043", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"983eacffd0562b46e7ea91eba2da4fa189767f8e023c9d0dcd4f69620a14a5cb", Pod:"coredns-674b8bbfcf-89d2r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calia803763b93a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.734 [INFO][5142] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.734 [INFO][5142] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" iface="eth0" netns="" Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.734 [INFO][5142] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.734 [INFO][5142] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.752 [INFO][5151] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" HandleID="k8s-pod-network.da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.752 [INFO][5151] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.752 [INFO][5151] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.758 [WARNING][5151] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" HandleID="k8s-pod-network.da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.758 [INFO][5151] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" HandleID="k8s-pod-network.da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Workload="localhost-k8s-coredns--674b8bbfcf--89d2r-eth0" Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.759 [INFO][5151] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:10.762704 env[1209]: 2025-07-10 00:48:10.760 [INFO][5142] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b" Jul 10 00:48:10.762704 env[1209]: time="2025-07-10T00:48:10.762652629Z" level=info msg="TearDown network for sandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\" successfully" Jul 10 00:48:10.766876 env[1209]: time="2025-07-10T00:48:10.766837805Z" level=info msg="RemovePodSandbox \"da31cc90909811ec2f09a5c65c2020a9c83bef8206eb4e5cdd2662690205329b\" returns successfully" Jul 10 00:48:10.767402 env[1209]: time="2025-07-10T00:48:10.767337468Z" level=info msg="StopPodSandbox for \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\"" Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.796 [WARNING][5168] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--dwxds-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5b03f62d-564c-468f-af64-90b8cb619060", ResourceVersion:"1237", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7", Pod:"csi-node-driver-dwxds", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali65510ccd19a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.796 [INFO][5168] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.796 [INFO][5168] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" iface="eth0" netns="" Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.796 [INFO][5168] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.796 [INFO][5168] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.817 [INFO][5177] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" HandleID="k8s-pod-network.8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.818 [INFO][5177] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.818 [INFO][5177] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.825 [WARNING][5177] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" HandleID="k8s-pod-network.8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.825 [INFO][5177] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" HandleID="k8s-pod-network.8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.826 [INFO][5177] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:10.830351 env[1209]: 2025-07-10 00:48:10.828 [INFO][5168] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:48:10.830865 env[1209]: time="2025-07-10T00:48:10.830365193Z" level=info msg="TearDown network for sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\" successfully" Jul 10 00:48:10.830865 env[1209]: time="2025-07-10T00:48:10.830411231Z" level=info msg="StopPodSandbox for \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\" returns successfully" Jul 10 00:48:10.831225 env[1209]: time="2025-07-10T00:48:10.831162307Z" level=info msg="RemovePodSandbox for \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\"" Jul 10 00:48:10.831225 env[1209]: time="2025-07-10T00:48:10.831206190Z" level=info msg="Forcibly stopping sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\"" Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.861 [WARNING][5194] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--dwxds-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"5b03f62d-564c-468f-af64-90b8cb619060", ResourceVersion:"1237", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f79e4eec4895e9583502077403f9072cafc1917141dea65c000a2608b276d8c7", Pod:"csi-node-driver-dwxds", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali65510ccd19a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.862 [INFO][5194] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.862 [INFO][5194] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" iface="eth0" netns="" Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.862 [INFO][5194] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.862 [INFO][5194] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.881 [INFO][5203] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" HandleID="k8s-pod-network.8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.881 [INFO][5203] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.881 [INFO][5203] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.889 [WARNING][5203] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" HandleID="k8s-pod-network.8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.889 [INFO][5203] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" HandleID="k8s-pod-network.8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Workload="localhost-k8s-csi--node--driver--dwxds-eth0" Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.890 [INFO][5203] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:10.894221 env[1209]: 2025-07-10 00:48:10.892 [INFO][5194] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada" Jul 10 00:48:10.894756 env[1209]: time="2025-07-10T00:48:10.894250687Z" level=info msg="TearDown network for sandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\" successfully" Jul 10 00:48:10.984064 env[1209]: time="2025-07-10T00:48:10.984004733Z" level=info msg="RemovePodSandbox \"8c913e2444d943923aa06b6fd9149e2fd0b59c9d90f4f5d46f4f08b91beebada\" returns successfully" Jul 10 00:48:10.984552 env[1209]: time="2025-07-10T00:48:10.984506891Z" level=info msg="StopPodSandbox for \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\"" Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.014 [WARNING][5221] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" WorkloadEndpoint="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.014 [INFO][5221] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.014 [INFO][5221] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" iface="eth0" netns="" Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.015 [INFO][5221] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.015 [INFO][5221] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.033 [INFO][5230] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" HandleID="k8s-pod-network.0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Workload="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.033 [INFO][5230] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.034 [INFO][5230] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.039 [WARNING][5230] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" HandleID="k8s-pod-network.0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Workload="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.039 [INFO][5230] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" HandleID="k8s-pod-network.0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Workload="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.040 [INFO][5230] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:11.044267 env[1209]: 2025-07-10 00:48:11.042 [INFO][5221] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:48:11.044267 env[1209]: time="2025-07-10T00:48:11.044218626Z" level=info msg="TearDown network for sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\" successfully" Jul 10 00:48:11.044267 env[1209]: time="2025-07-10T00:48:11.044247691Z" level=info msg="StopPodSandbox for \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\" returns successfully" Jul 10 00:48:11.045168 env[1209]: time="2025-07-10T00:48:11.045125087Z" level=info msg="RemovePodSandbox for \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\"" Jul 10 00:48:11.045243 env[1209]: time="2025-07-10T00:48:11.045154532Z" level=info msg="Forcibly stopping sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\"" Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.108 [WARNING][5248] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" WorkloadEndpoint="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.108 [INFO][5248] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.108 [INFO][5248] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" iface="eth0" netns="" Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.108 [INFO][5248] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.109 [INFO][5248] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.127 [INFO][5257] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" HandleID="k8s-pod-network.0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Workload="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.127 [INFO][5257] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.128 [INFO][5257] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.134 [WARNING][5257] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" HandleID="k8s-pod-network.0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Workload="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.134 [INFO][5257] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" HandleID="k8s-pod-network.0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Workload="localhost-k8s-whisker--69b7cbf468--zsnbh-eth0" Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.137 [INFO][5257] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:11.141273 env[1209]: 2025-07-10 00:48:11.139 [INFO][5248] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d" Jul 10 00:48:11.141925 env[1209]: time="2025-07-10T00:48:11.141284829Z" level=info msg="TearDown network for sandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\" successfully" Jul 10 00:48:11.148003 env[1209]: time="2025-07-10T00:48:11.147945514Z" level=info msg="RemovePodSandbox \"0e8a01450d8166416d3e6f72e2b90a3dee220f86411c33aa730a3c19ba587d3d\" returns successfully" Jul 10 00:48:11.148651 env[1209]: time="2025-07-10T00:48:11.148614446Z" level=info msg="StopPodSandbox for \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\"" Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.179 [WARNING][5275] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--c5stg-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fad3c025-db1a-4fad-a522-ba2e599e52d0", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2", Pod:"coredns-674b8bbfcf-c5stg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"califbb2b2cc2d5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.179 [INFO][5275] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.179 [INFO][5275] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" iface="eth0" netns="" Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.179 [INFO][5275] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.179 [INFO][5275] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.200 [INFO][5285] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" HandleID="k8s-pod-network.16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.201 [INFO][5285] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.201 [INFO][5285] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.259 [WARNING][5285] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" HandleID="k8s-pod-network.16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.259 [INFO][5285] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" HandleID="k8s-pod-network.16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.261 [INFO][5285] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:11.265104 env[1209]: 2025-07-10 00:48:11.262 [INFO][5275] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:48:11.265897 env[1209]: time="2025-07-10T00:48:11.265825111Z" level=info msg="TearDown network for sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\" successfully" Jul 10 00:48:11.265897 env[1209]: time="2025-07-10T00:48:11.265875316Z" level=info msg="StopPodSandbox for \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\" returns successfully" Jul 10 00:48:11.266458 env[1209]: time="2025-07-10T00:48:11.266421156Z" level=info msg="RemovePodSandbox for \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\"" Jul 10 00:48:11.266530 env[1209]: time="2025-07-10T00:48:11.266463515Z" level=info msg="Forcibly stopping sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\"" Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.296 [WARNING][5303] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--c5stg-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"fad3c025-db1a-4fad-a522-ba2e599e52d0", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"fd8022b64ecf3e6a2131e46163946d198d00e8364b36be7d2bb1fc09fce468e2", Pod:"coredns-674b8bbfcf-c5stg", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"califbb2b2cc2d5", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.296 [INFO][5303] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.296 [INFO][5303] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" iface="eth0" netns="" Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.296 [INFO][5303] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.296 [INFO][5303] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.318 [INFO][5313] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" HandleID="k8s-pod-network.16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.318 [INFO][5313] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.318 [INFO][5313] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.323 [WARNING][5313] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" HandleID="k8s-pod-network.16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.323 [INFO][5313] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" HandleID="k8s-pod-network.16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Workload="localhost-k8s-coredns--674b8bbfcf--c5stg-eth0" Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.324 [INFO][5313] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:11.328579 env[1209]: 2025-07-10 00:48:11.326 [INFO][5303] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627" Jul 10 00:48:11.328579 env[1209]: time="2025-07-10T00:48:11.328528069Z" level=info msg="TearDown network for sandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\" successfully" Jul 10 00:48:11.332034 env[1209]: time="2025-07-10T00:48:11.331985030Z" level=info msg="RemovePodSandbox \"16346042113e383693cb1e6f040a2cb244a3df39cf290f0fd9a05144a2dd1627\" returns successfully" Jul 10 00:48:11.332600 env[1209]: time="2025-07-10T00:48:11.332560486Z" level=info msg="StopPodSandbox for \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\"" Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.368 [WARNING][5332] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0", GenerateName:"calico-kube-controllers-6fb9d69dc5-", Namespace:"calico-system", SelfLink:"", UID:"7971856c-7069-4d9d-9ccc-de726a8a0019", ResourceVersion:"1137", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6fb9d69dc5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb", Pod:"calico-kube-controllers-6fb9d69dc5-lhdbl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali94093fb3f47", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.370 [INFO][5332] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.370 [INFO][5332] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" iface="eth0" netns="" Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.370 [INFO][5332] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.370 [INFO][5332] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.392 [INFO][5341] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" HandleID="k8s-pod-network.e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.392 [INFO][5341] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.392 [INFO][5341] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.399 [WARNING][5341] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" HandleID="k8s-pod-network.e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.399 [INFO][5341] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" HandleID="k8s-pod-network.e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.400 [INFO][5341] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:11.404489 env[1209]: 2025-07-10 00:48:11.402 [INFO][5332] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:48:11.405363 env[1209]: time="2025-07-10T00:48:11.404523231Z" level=info msg="TearDown network for sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\" successfully" Jul 10 00:48:11.405363 env[1209]: time="2025-07-10T00:48:11.404592201Z" level=info msg="StopPodSandbox for \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\" returns successfully" Jul 10 00:48:11.405363 env[1209]: time="2025-07-10T00:48:11.404873021Z" level=info msg="RemovePodSandbox for \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\"" Jul 10 00:48:11.405363 env[1209]: time="2025-07-10T00:48:11.404904340Z" level=info msg="Forcibly stopping sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\"" Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.434 [WARNING][5359] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0", GenerateName:"calico-kube-controllers-6fb9d69dc5-", Namespace:"calico-system", SelfLink:"", UID:"7971856c-7069-4d9d-9ccc-de726a8a0019", ResourceVersion:"1137", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 47, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6fb9d69dc5", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"63242b7da1fa977be7cb8364ba7f0737c1195b3f1b47740c2a3dc6de92bae1bb", Pod:"calico-kube-controllers-6fb9d69dc5-lhdbl", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali94093fb3f47", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.434 [INFO][5359] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.435 [INFO][5359] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" iface="eth0" netns="" Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.435 [INFO][5359] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.435 [INFO][5359] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.452 [INFO][5369] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" HandleID="k8s-pod-network.e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.452 [INFO][5369] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.452 [INFO][5369] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.458 [WARNING][5369] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" HandleID="k8s-pod-network.e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.458 [INFO][5369] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" HandleID="k8s-pod-network.e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Workload="localhost-k8s-calico--kube--controllers--6fb9d69dc5--lhdbl-eth0" Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.459 [INFO][5369] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:48:11.462606 env[1209]: 2025-07-10 00:48:11.460 [INFO][5359] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8" Jul 10 00:48:11.463070 env[1209]: time="2025-07-10T00:48:11.462634025Z" level=info msg="TearDown network for sandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\" successfully" Jul 10 00:48:11.466360 env[1209]: time="2025-07-10T00:48:11.466310500Z" level=info msg="RemovePodSandbox \"e33c7d664b6720200cdf9228cc1473948cc9734bd202bcd8e5c2438f870fa2a8\" returns successfully" Jul 10 00:48:11.491499 systemd[1]: Started sshd@14-10.0.0.138:22-10.0.0.1:36946.service. Jul 10 00:48:11.491000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.138:22-10.0.0.1:36946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:11.492694 kernel: kauditd_printk_skb: 31 callbacks suppressed Jul 10 00:48:11.492924 kernel: audit: type=1130 audit(1752108491.491:1510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.138:22-10.0.0.1:36946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:11.525000 audit[5378]: USER_ACCT pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.526563 sshd[5378]: Accepted publickey for core from 10.0.0.1 port 36946 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:11.528875 sshd[5378]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:11.528000 audit[5378]: CRED_ACQ pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.532911 systemd-logind[1196]: New session 15 of user core. Jul 10 00:48:11.533717 systemd[1]: Started session-15.scope. Jul 10 00:48:11.535469 kernel: audit: type=1101 audit(1752108491.525:1511): pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.535513 kernel: audit: type=1103 audit(1752108491.528:1512): pid=5378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.535540 kernel: audit: type=1006 audit(1752108491.528:1513): pid=5378 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 10 00:48:11.537714 kernel: audit: type=1300 audit(1752108491.528:1513): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffeae35ac0 a2=3 a3=0 items=0 ppid=1 pid=5378 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.528000 audit[5378]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffeae35ac0 a2=3 a3=0 items=0 ppid=1 pid=5378 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:11.528000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:11.542127 kernel: audit: type=1327 audit(1752108491.528:1513): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:11.542171 kernel: audit: type=1105 audit(1752108491.537:1514): pid=5378 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.537000 audit[5378]: USER_START pid=5378 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.546491 kernel: audit: type=1103 audit(1752108491.539:1515): pid=5380 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.539000 audit[5380]: CRED_ACQ pid=5380 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.730765 sshd[5378]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:11.731000 audit[5378]: USER_END pid=5378 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.733370 systemd[1]: sshd@14-10.0.0.138:22-10.0.0.1:36946.service: Deactivated successfully. Jul 10 00:48:11.734173 systemd[1]: session-15.scope: Deactivated successfully. Jul 10 00:48:11.731000 audit[5378]: CRED_DISP pid=5378 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.736656 systemd-logind[1196]: Session 15 logged out. Waiting for processes to exit. Jul 10 00:48:11.737351 systemd-logind[1196]: Removed session 15. Jul 10 00:48:11.739885 kernel: audit: type=1106 audit(1752108491.731:1516): pid=5378 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.739954 kernel: audit: type=1104 audit(1752108491.731:1517): pid=5378 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:11.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.138:22-10.0.0.1:36946 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:13.159000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:13.159000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a2e4e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:48:13.159000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:13.159000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:13.159000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001116ea0 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:48:13.159000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:13.159000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a2e5e0 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:48:13.159000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:13.159000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:13.159000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6719 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:48:13.159000 audit[1828]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000780a40 a2=fc6 a3=0 items=0 ppid=1683 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c453 key=(null) Jul 10 00:48:13.159000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:48:16.736294 systemd[1]: Started sshd@15-10.0.0.138:22-10.0.0.1:34210.service. Jul 10 00:48:16.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.138:22-10.0.0.1:34210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:16.742353 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 10 00:48:16.742506 kernel: audit: type=1130 audit(1752108496.735:1523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.138:22-10.0.0.1:34210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:16.769000 audit[5414]: USER_ACCT pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.775455 kernel: audit: type=1101 audit(1752108496.769:1524): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.775494 sshd[5414]: Accepted publickey for core from 10.0.0.1 port 34210 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:16.775719 sshd[5414]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:16.781786 kernel: audit: type=1103 audit(1752108496.773:1525): pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.781836 kernel: audit: type=1006 audit(1752108496.773:1526): pid=5414 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 10 00:48:16.773000 audit[5414]: CRED_ACQ pid=5414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.780503 systemd[1]: Started session-16.scope. Jul 10 00:48:16.781525 systemd-logind[1196]: New session 16 of user core. Jul 10 00:48:16.773000 audit[5414]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfa982f00 a2=3 a3=0 items=0 ppid=1 pid=5414 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:16.773000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:16.787985 kernel: audit: type=1300 audit(1752108496.773:1526): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfa982f00 a2=3 a3=0 items=0 ppid=1 pid=5414 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:16.788150 kernel: audit: type=1327 audit(1752108496.773:1526): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:16.788173 kernel: audit: type=1105 audit(1752108496.784:1527): pid=5414 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.784000 audit[5414]: USER_START pid=5414 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.787000 audit[5416]: CRED_ACQ pid=5416 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.796162 kernel: audit: type=1103 audit(1752108496.787:1528): pid=5416 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.924239 systemd[1]: Started sshd@16-10.0.0.138:22-10.0.0.1:34218.service. Jul 10 00:48:16.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.138:22-10.0.0.1:34218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:16.926583 sshd[5414]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:16.928454 kernel: audit: type=1130 audit(1752108496.923:1529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.138:22-10.0.0.1:34218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:16.926000 audit[5414]: USER_END pid=5414 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.930146 systemd-logind[1196]: Session 16 logged out. Waiting for processes to exit. Jul 10 00:48:16.931405 systemd[1]: sshd@15-10.0.0.138:22-10.0.0.1:34210.service: Deactivated successfully. Jul 10 00:48:16.931950 systemd[1]: session-16.scope: Deactivated successfully. Jul 10 00:48:16.933434 kernel: audit: type=1106 audit(1752108496.926:1530): pid=5414 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.933176 systemd-logind[1196]: Removed session 16. Jul 10 00:48:16.926000 audit[5414]: CRED_DISP pid=5414 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.138:22-10.0.0.1:34210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:16.959000 audit[5446]: USER_ACCT pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.961307 sshd[5446]: Accepted publickey for core from 10.0.0.1 port 34218 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:16.960000 audit[5446]: CRED_ACQ pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.960000 audit[5446]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe72a28bd0 a2=3 a3=0 items=0 ppid=1 pid=5446 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:16.960000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:16.962442 sshd[5446]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:16.966897 systemd[1]: Started session-17.scope. Jul 10 00:48:16.967200 systemd-logind[1196]: New session 17 of user core. Jul 10 00:48:16.970000 audit[5446]: USER_START pid=5446 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:16.972000 audit[5452]: CRED_ACQ pid=5452 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:17.201403 sshd[5446]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:17.201000 audit[5446]: USER_END pid=5446 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:17.201000 audit[5446]: CRED_DISP pid=5446 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:17.204000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.138:22-10.0.0.1:34232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:17.205592 systemd[1]: Started sshd@17-10.0.0.138:22-10.0.0.1:34232.service. Jul 10 00:48:17.206126 systemd[1]: sshd@16-10.0.0.138:22-10.0.0.1:34218.service: Deactivated successfully. Jul 10 00:48:17.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.138:22-10.0.0.1:34218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:17.207033 systemd[1]: session-17.scope: Deactivated successfully. Jul 10 00:48:17.207575 systemd-logind[1196]: Session 17 logged out. Waiting for processes to exit. Jul 10 00:48:17.208454 systemd-logind[1196]: Removed session 17. Jul 10 00:48:17.235000 audit[5460]: USER_ACCT pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:17.237043 sshd[5460]: Accepted publickey for core from 10.0.0.1 port 34232 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:17.236000 audit[5460]: CRED_ACQ pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:17.236000 audit[5460]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc75e29a20 a2=3 a3=0 items=0 ppid=1 pid=5460 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:17.236000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:17.237979 sshd[5460]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:17.241274 systemd-logind[1196]: New session 18 of user core. Jul 10 00:48:17.242049 systemd[1]: Started session-18.scope. Jul 10 00:48:17.244000 audit[5460]: USER_START pid=5460 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:17.246000 audit[5463]: CRED_ACQ pid=5463 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:17.966000 audit[5475]: NETFILTER_CFG table=filter:134 family=2 entries=20 op=nft_register_rule pid=5475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:17.966000 audit[5475]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd78761790 a2=0 a3=7ffd7876177c items=0 ppid=2118 pid=5475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:17.966000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:17.971000 audit[5475]: NETFILTER_CFG table=nat:135 family=2 entries=26 op=nft_register_rule pid=5475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:17.971000 audit[5475]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd78761790 a2=0 a3=0 items=0 ppid=2118 pid=5475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:17.971000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:17.974950 sshd[5460]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:17.974000 audit[5460]: USER_END pid=5460 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:17.974000 audit[5460]: CRED_DISP pid=5460 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:17.977616 systemd[1]: sshd@17-10.0.0.138:22-10.0.0.1:34232.service: Deactivated successfully. Jul 10 00:48:17.976000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.138:22-10.0.0.1:34232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:17.978194 systemd[1]: session-18.scope: Deactivated successfully. Jul 10 00:48:17.980487 systemd[1]: Started sshd@18-10.0.0.138:22-10.0.0.1:34234.service. Jul 10 00:48:17.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.138:22-10.0.0.1:34234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:17.980698 systemd-logind[1196]: Session 18 logged out. Waiting for processes to exit. Jul 10 00:48:17.981923 systemd-logind[1196]: Removed session 18. Jul 10 00:48:17.986000 audit[5480]: NETFILTER_CFG table=filter:136 family=2 entries=32 op=nft_register_rule pid=5480 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:17.986000 audit[5480]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fff14962560 a2=0 a3=7fff1496254c items=0 ppid=2118 pid=5480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:17.986000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:17.990000 audit[5480]: NETFILTER_CFG table=nat:137 family=2 entries=26 op=nft_register_rule pid=5480 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:17.990000 audit[5480]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7fff14962560 a2=0 a3=0 items=0 ppid=2118 pid=5480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:17.990000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:18.015000 audit[5479]: USER_ACCT pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.017458 sshd[5479]: Accepted publickey for core from 10.0.0.1 port 34234 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:18.016000 audit[5479]: CRED_ACQ pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.016000 audit[5479]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda9988ea0 a2=3 a3=0 items=0 ppid=1 pid=5479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:18.016000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:18.018590 sshd[5479]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:18.022949 systemd-logind[1196]: New session 19 of user core. Jul 10 00:48:18.023467 systemd[1]: Started session-19.scope. Jul 10 00:48:18.027000 audit[5479]: USER_START pid=5479 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.029000 audit[5482]: CRED_ACQ pid=5482 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.347141 sshd[5479]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:18.346000 audit[5479]: USER_END pid=5479 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.347000 audit[5479]: CRED_DISP pid=5479 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.352054 systemd[1]: sshd@18-10.0.0.138:22-10.0.0.1:34234.service: Deactivated successfully. Jul 10 00:48:18.352848 systemd[1]: session-19.scope: Deactivated successfully. Jul 10 00:48:18.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.138:22-10.0.0.1:34234 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:18.353635 systemd-logind[1196]: Session 19 logged out. Waiting for processes to exit. Jul 10 00:48:18.354880 systemd[1]: Started sshd@19-10.0.0.138:22-10.0.0.1:34244.service. Jul 10 00:48:18.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.138:22-10.0.0.1:34244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:18.356079 systemd-logind[1196]: Removed session 19. Jul 10 00:48:18.387000 audit[5491]: USER_ACCT pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.388799 sshd[5491]: Accepted publickey for core from 10.0.0.1 port 34244 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:18.388000 audit[5491]: CRED_ACQ pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.388000 audit[5491]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd15e3da0 a2=3 a3=0 items=0 ppid=1 pid=5491 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:18.388000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:18.389966 sshd[5491]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:18.394926 systemd[1]: Started session-20.scope. Jul 10 00:48:18.395249 systemd-logind[1196]: New session 20 of user core. Jul 10 00:48:18.399000 audit[5491]: USER_START pid=5491 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.401000 audit[5493]: CRED_ACQ pid=5493 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.468033 systemd[1]: run-containerd-runc-k8s.io-b2a89ecc3f808d96c356ebbe1557e2c632e5d29ced1109a628c2a9d46fa4e42b-runc.AmJbYn.mount: Deactivated successfully. Jul 10 00:48:18.545999 sshd[5491]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:18.545000 audit[5491]: USER_END pid=5491 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.545000 audit[5491]: CRED_DISP pid=5491 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:18.548191 systemd[1]: sshd@19-10.0.0.138:22-10.0.0.1:34244.service: Deactivated successfully. Jul 10 00:48:18.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.138:22-10.0.0.1:34244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:18.548951 systemd[1]: session-20.scope: Deactivated successfully. Jul 10 00:48:18.549562 systemd-logind[1196]: Session 20 logged out. Waiting for processes to exit. Jul 10 00:48:18.550277 systemd-logind[1196]: Removed session 20. Jul 10 00:48:23.376603 systemd[1]: run-containerd-runc-k8s.io-b2a89ecc3f808d96c356ebbe1557e2c632e5d29ced1109a628c2a9d46fa4e42b-runc.yxDe0w.mount: Deactivated successfully. Jul 10 00:48:23.550640 systemd[1]: Started sshd@20-10.0.0.138:22-10.0.0.1:34248.service. Jul 10 00:48:23.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.138:22-10.0.0.1:34248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:23.554412 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 10 00:48:23.554539 kernel: audit: type=1130 audit(1752108503.549:1572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.138:22-10.0.0.1:34248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:23.585000 audit[5542]: USER_ACCT pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.587562 sshd[5542]: Accepted publickey for core from 10.0.0.1 port 34248 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:23.591412 kernel: audit: type=1101 audit(1752108503.585:1573): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.597706 kernel: audit: type=1103 audit(1752108503.590:1574): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.597852 kernel: audit: type=1006 audit(1752108503.590:1575): pid=5542 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 10 00:48:23.590000 audit[5542]: CRED_ACQ pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.592415 sshd[5542]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:23.602331 kernel: audit: type=1300 audit(1752108503.590:1575): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc684e09b0 a2=3 a3=0 items=0 ppid=1 pid=5542 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:23.590000 audit[5542]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc684e09b0 a2=3 a3=0 items=0 ppid=1 pid=5542 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:23.600128 systemd[1]: Started session-21.scope. Jul 10 00:48:23.600517 systemd-logind[1196]: New session 21 of user core. Jul 10 00:48:23.590000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:23.604405 kernel: audit: type=1327 audit(1752108503.590:1575): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:23.605000 audit[5542]: USER_START pid=5542 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.606000 audit[5544]: CRED_ACQ pid=5544 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.614552 kernel: audit: type=1105 audit(1752108503.605:1576): pid=5542 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.614615 kernel: audit: type=1103 audit(1752108503.606:1577): pid=5544 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.711514 sshd[5542]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:23.711000 audit[5542]: USER_END pid=5542 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.711000 audit[5542]: CRED_DISP pid=5542 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.714509 systemd[1]: sshd@20-10.0.0.138:22-10.0.0.1:34248.service: Deactivated successfully. Jul 10 00:48:23.715240 systemd[1]: session-21.scope: Deactivated successfully. Jul 10 00:48:23.715796 systemd-logind[1196]: Session 21 logged out. Waiting for processes to exit. Jul 10 00:48:23.716763 systemd-logind[1196]: Removed session 21. Jul 10 00:48:23.720489 kernel: audit: type=1106 audit(1752108503.711:1578): pid=5542 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.720635 kernel: audit: type=1104 audit(1752108503.711:1579): pid=5542 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:23.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.138:22-10.0.0.1:34248 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:24.223000 audit[5555]: NETFILTER_CFG table=filter:138 family=2 entries=20 op=nft_register_rule pid=5555 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:24.223000 audit[5555]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcc308c770 a2=0 a3=7ffcc308c75c items=0 ppid=2118 pid=5555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:24.223000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:24.230000 audit[5555]: NETFILTER_CFG table=nat:139 family=2 entries=110 op=nft_register_chain pid=5555 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:48:24.230000 audit[5555]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffcc308c770 a2=0 a3=7ffcc308c75c items=0 ppid=2118 pid=5555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:24.230000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:48:28.715723 systemd[1]: Started sshd@21-10.0.0.138:22-10.0.0.1:40782.service. Jul 10 00:48:28.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.138:22-10.0.0.1:40782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:28.716738 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 10 00:48:28.716813 kernel: audit: type=1130 audit(1752108508.715:1583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.138:22-10.0.0.1:40782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:28.750000 audit[5564]: USER_ACCT pid=5564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.750871 sshd[5564]: Accepted publickey for core from 10.0.0.1 port 40782 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:28.754416 kernel: audit: type=1101 audit(1752108508.750:1584): pid=5564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.754470 kernel: audit: type=1103 audit(1752108508.754:1585): pid=5564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.754000 audit[5564]: CRED_ACQ pid=5564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.754778 sshd[5564]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:28.758149 systemd-logind[1196]: New session 22 of user core. Jul 10 00:48:28.758963 systemd[1]: Started session-22.scope. Jul 10 00:48:28.764002 kernel: audit: type=1006 audit(1752108508.754:1586): pid=5564 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 10 00:48:28.764251 kernel: audit: type=1300 audit(1752108508.754:1586): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeec94ff50 a2=3 a3=0 items=0 ppid=1 pid=5564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:28.764437 kernel: audit: type=1327 audit(1752108508.754:1586): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:28.754000 audit[5564]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeec94ff50 a2=3 a3=0 items=0 ppid=1 pid=5564 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:28.754000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:28.762000 audit[5564]: USER_START pid=5564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.769855 kernel: audit: type=1105 audit(1752108508.762:1587): pid=5564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.769894 kernel: audit: type=1103 audit(1752108508.764:1588): pid=5566 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.764000 audit[5566]: CRED_ACQ pid=5566 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.900488 sshd[5564]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:28.901000 audit[5564]: USER_END pid=5564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.903128 systemd[1]: sshd@21-10.0.0.138:22-10.0.0.1:40782.service: Deactivated successfully. Jul 10 00:48:28.903865 systemd[1]: session-22.scope: Deactivated successfully. Jul 10 00:48:28.904415 systemd-logind[1196]: Session 22 logged out. Waiting for processes to exit. Jul 10 00:48:28.905065 systemd-logind[1196]: Removed session 22. Jul 10 00:48:28.901000 audit[5564]: CRED_DISP pid=5564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.909161 kernel: audit: type=1106 audit(1752108508.901:1589): pid=5564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.909216 kernel: audit: type=1104 audit(1752108508.901:1590): pid=5564 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:28.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.138:22-10.0.0.1:40782 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:33.232160 kubelet[1964]: E0710 00:48:33.232102 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:48:33.905115 systemd[1]: Started sshd@22-10.0.0.138:22-10.0.0.1:40796.service. Jul 10 00:48:33.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.138:22-10.0.0.1:40796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:33.909427 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:48:33.909480 kernel: audit: type=1130 audit(1752108513.904:1592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.138:22-10.0.0.1:40796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:33.934000 audit[5579]: USER_ACCT pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:33.935232 sshd[5579]: Accepted publickey for core from 10.0.0.1 port 40796 ssh2: RSA SHA256:sjwemXrFIWSW6YMJmGZUZttp2LaJHY3bFypW68DkT1M Jul 10 00:48:33.936281 sshd[5579]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:48:33.935000 audit[5579]: CRED_ACQ pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:33.940193 systemd-logind[1196]: New session 23 of user core. Jul 10 00:48:33.940578 systemd[1]: Started session-23.scope. Jul 10 00:48:33.942363 kernel: audit: type=1101 audit(1752108513.934:1593): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:33.942434 kernel: audit: type=1103 audit(1752108513.935:1594): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:33.948456 kernel: audit: type=1006 audit(1752108513.935:1595): pid=5579 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 10 00:48:33.948628 kernel: audit: type=1300 audit(1752108513.935:1595): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda790f800 a2=3 a3=0 items=0 ppid=1 pid=5579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:33.950060 kernel: audit: type=1327 audit(1752108513.935:1595): proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:33.950094 kernel: audit: type=1105 audit(1752108513.945:1596): pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:33.935000 audit[5579]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda790f800 a2=3 a3=0 items=0 ppid=1 pid=5579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:48:33.935000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:48:33.945000 audit[5579]: USER_START pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:33.946000 audit[5581]: CRED_ACQ pid=5581 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:33.956932 kernel: audit: type=1103 audit(1752108513.946:1597): pid=5581 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.066113 sshd[5579]: pam_unix(sshd:session): session closed for user core Jul 10 00:48:34.066000 audit[5579]: USER_END pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.068572 systemd[1]: sshd@22-10.0.0.138:22-10.0.0.1:40796.service: Deactivated successfully. Jul 10 00:48:34.069357 systemd[1]: session-23.scope: Deactivated successfully. Jul 10 00:48:34.069877 systemd-logind[1196]: Session 23 logged out. Waiting for processes to exit. Jul 10 00:48:34.070627 systemd-logind[1196]: Removed session 23. Jul 10 00:48:34.066000 audit[5579]: CRED_DISP pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.074150 kernel: audit: type=1106 audit(1752108514.066:1598): pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.074213 kernel: audit: type=1104 audit(1752108514.066:1599): pid=5579 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:48:34.068000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.138:22-10.0.0.1:40796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:48:36.233218 kubelet[1964]: E0710 00:48:36.233162 1964 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8"