Jul 10 01:03:20.643633 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Wed Jul 9 23:09:45 -00 2025 Jul 10 01:03:20.643648 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 01:03:20.643654 kernel: Disabled fast string operations Jul 10 01:03:20.643658 kernel: BIOS-provided physical RAM map: Jul 10 01:03:20.643661 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ebff] usable Jul 10 01:03:20.643665 kernel: BIOS-e820: [mem 0x000000000009ec00-0x000000000009ffff] reserved Jul 10 01:03:20.643671 kernel: BIOS-e820: [mem 0x00000000000dc000-0x00000000000fffff] reserved Jul 10 01:03:20.643675 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007fedffff] usable Jul 10 01:03:20.643679 kernel: BIOS-e820: [mem 0x000000007fee0000-0x000000007fefefff] ACPI data Jul 10 01:03:20.643683 kernel: BIOS-e820: [mem 0x000000007feff000-0x000000007fefffff] ACPI NVS Jul 10 01:03:20.643687 kernel: BIOS-e820: [mem 0x000000007ff00000-0x000000007fffffff] usable Jul 10 01:03:20.643690 kernel: BIOS-e820: [mem 0x00000000f0000000-0x00000000f7ffffff] reserved Jul 10 01:03:20.643694 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec0ffff] reserved Jul 10 01:03:20.643698 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Jul 10 01:03:20.643704 kernel: BIOS-e820: [mem 0x00000000fffe0000-0x00000000ffffffff] reserved Jul 10 01:03:20.643709 kernel: NX (Execute Disable) protection: active Jul 10 01:03:20.643713 kernel: SMBIOS 2.7 present. Jul 10 01:03:20.643717 kernel: DMI: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020 Jul 10 01:03:20.643722 kernel: vmware: hypercall mode: 0x00 Jul 10 01:03:20.643726 kernel: Hypervisor detected: VMware Jul 10 01:03:20.643731 kernel: vmware: TSC freq read from hypervisor : 3408.000 MHz Jul 10 01:03:20.643735 kernel: vmware: Host bus clock speed read from hypervisor : 66000000 Hz Jul 10 01:03:20.643740 kernel: vmware: using clock offset of 2765513984 ns Jul 10 01:03:20.643744 kernel: tsc: Detected 3408.000 MHz processor Jul 10 01:03:20.643749 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 10 01:03:20.643753 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 10 01:03:20.643758 kernel: last_pfn = 0x80000 max_arch_pfn = 0x400000000 Jul 10 01:03:20.643762 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 10 01:03:20.643766 kernel: total RAM covered: 3072M Jul 10 01:03:20.643772 kernel: Found optimal setting for mtrr clean up Jul 10 01:03:20.643777 kernel: gran_size: 64K chunk_size: 64K num_reg: 2 lose cover RAM: 0G Jul 10 01:03:20.643781 kernel: Using GB pages for direct mapping Jul 10 01:03:20.643785 kernel: ACPI: Early table checksum verification disabled Jul 10 01:03:20.643790 kernel: ACPI: RSDP 0x00000000000F6A00 000024 (v02 PTLTD ) Jul 10 01:03:20.643794 kernel: ACPI: XSDT 0x000000007FEE965B 00005C (v01 INTEL 440BX 06040000 VMW 01324272) Jul 10 01:03:20.643798 kernel: ACPI: FACP 0x000000007FEFEE73 0000F4 (v04 INTEL 440BX 06040000 PTL 000F4240) Jul 10 01:03:20.643803 kernel: ACPI: DSDT 0x000000007FEEAD55 01411E (v01 PTLTD Custom 06040000 MSFT 03000001) Jul 10 01:03:20.643807 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 10 01:03:20.643811 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 10 01:03:20.643817 kernel: ACPI: BOOT 0x000000007FEEAD2D 000028 (v01 PTLTD $SBFTBL$ 06040000 LTP 00000001) Jul 10 01:03:20.643823 kernel: ACPI: APIC 0x000000007FEEA5EB 000742 (v01 PTLTD ? APIC 06040000 LTP 00000000) Jul 10 01:03:20.643828 kernel: ACPI: MCFG 0x000000007FEEA5AF 00003C (v01 PTLTD $PCITBL$ 06040000 LTP 00000001) Jul 10 01:03:20.643832 kernel: ACPI: SRAT 0x000000007FEE9757 0008A8 (v02 VMWARE MEMPLUG 06040000 VMW 00000001) Jul 10 01:03:20.643837 kernel: ACPI: HPET 0x000000007FEE971F 000038 (v01 VMWARE VMW HPET 06040000 VMW 00000001) Jul 10 01:03:20.643843 kernel: ACPI: WAET 0x000000007FEE96F7 000028 (v01 VMWARE VMW WAET 06040000 VMW 00000001) Jul 10 01:03:20.643847 kernel: ACPI: Reserving FACP table memory at [mem 0x7fefee73-0x7fefef66] Jul 10 01:03:20.643852 kernel: ACPI: Reserving DSDT table memory at [mem 0x7feead55-0x7fefee72] Jul 10 01:03:20.643857 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 10 01:03:20.643861 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 10 01:03:20.643866 kernel: ACPI: Reserving BOOT table memory at [mem 0x7feead2d-0x7feead54] Jul 10 01:03:20.643871 kernel: ACPI: Reserving APIC table memory at [mem 0x7feea5eb-0x7feead2c] Jul 10 01:03:20.643875 kernel: ACPI: Reserving MCFG table memory at [mem 0x7feea5af-0x7feea5ea] Jul 10 01:03:20.643880 kernel: ACPI: Reserving SRAT table memory at [mem 0x7fee9757-0x7fee9ffe] Jul 10 01:03:20.643886 kernel: ACPI: Reserving HPET table memory at [mem 0x7fee971f-0x7fee9756] Jul 10 01:03:20.643890 kernel: ACPI: Reserving WAET table memory at [mem 0x7fee96f7-0x7fee971e] Jul 10 01:03:20.643895 kernel: system APIC only can use physical flat Jul 10 01:03:20.643899 kernel: Setting APIC routing to physical flat. Jul 10 01:03:20.643904 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Jul 10 01:03:20.643909 kernel: SRAT: PXM 0 -> APIC 0x02 -> Node 0 Jul 10 01:03:20.643913 kernel: SRAT: PXM 0 -> APIC 0x04 -> Node 0 Jul 10 01:03:20.643918 kernel: SRAT: PXM 0 -> APIC 0x06 -> Node 0 Jul 10 01:03:20.643922 kernel: SRAT: PXM 0 -> APIC 0x08 -> Node 0 Jul 10 01:03:20.643928 kernel: SRAT: PXM 0 -> APIC 0x0a -> Node 0 Jul 10 01:03:20.643932 kernel: SRAT: PXM 0 -> APIC 0x0c -> Node 0 Jul 10 01:03:20.643937 kernel: SRAT: PXM 0 -> APIC 0x0e -> Node 0 Jul 10 01:03:20.643942 kernel: SRAT: PXM 0 -> APIC 0x10 -> Node 0 Jul 10 01:03:20.643946 kernel: SRAT: PXM 0 -> APIC 0x12 -> Node 0 Jul 10 01:03:20.643951 kernel: SRAT: PXM 0 -> APIC 0x14 -> Node 0 Jul 10 01:03:20.643955 kernel: SRAT: PXM 0 -> APIC 0x16 -> Node 0 Jul 10 01:03:20.643960 kernel: SRAT: PXM 0 -> APIC 0x18 -> Node 0 Jul 10 01:03:20.643964 kernel: SRAT: PXM 0 -> APIC 0x1a -> Node 0 Jul 10 01:03:20.643969 kernel: SRAT: PXM 0 -> APIC 0x1c -> Node 0 Jul 10 01:03:20.643974 kernel: SRAT: PXM 0 -> APIC 0x1e -> Node 0 Jul 10 01:03:20.643979 kernel: SRAT: PXM 0 -> APIC 0x20 -> Node 0 Jul 10 01:03:20.643984 kernel: SRAT: PXM 0 -> APIC 0x22 -> Node 0 Jul 10 01:03:20.643988 kernel: SRAT: PXM 0 -> APIC 0x24 -> Node 0 Jul 10 01:03:20.643993 kernel: SRAT: PXM 0 -> APIC 0x26 -> Node 0 Jul 10 01:03:20.643997 kernel: SRAT: PXM 0 -> APIC 0x28 -> Node 0 Jul 10 01:03:20.644002 kernel: SRAT: PXM 0 -> APIC 0x2a -> Node 0 Jul 10 01:03:20.644007 kernel: SRAT: PXM 0 -> APIC 0x2c -> Node 0 Jul 10 01:03:20.644011 kernel: SRAT: PXM 0 -> APIC 0x2e -> Node 0 Jul 10 01:03:20.644016 kernel: SRAT: PXM 0 -> APIC 0x30 -> Node 0 Jul 10 01:03:20.644021 kernel: SRAT: PXM 0 -> APIC 0x32 -> Node 0 Jul 10 01:03:20.644026 kernel: SRAT: PXM 0 -> APIC 0x34 -> Node 0 Jul 10 01:03:20.644030 kernel: SRAT: PXM 0 -> APIC 0x36 -> Node 0 Jul 10 01:03:20.644035 kernel: SRAT: PXM 0 -> APIC 0x38 -> Node 0 Jul 10 01:03:20.644040 kernel: SRAT: PXM 0 -> APIC 0x3a -> Node 0 Jul 10 01:03:20.644044 kernel: SRAT: PXM 0 -> APIC 0x3c -> Node 0 Jul 10 01:03:20.644049 kernel: SRAT: PXM 0 -> APIC 0x3e -> Node 0 Jul 10 01:03:20.644053 kernel: SRAT: PXM 0 -> APIC 0x40 -> Node 0 Jul 10 01:03:20.644058 kernel: SRAT: PXM 0 -> APIC 0x42 -> Node 0 Jul 10 01:03:20.644062 kernel: SRAT: PXM 0 -> APIC 0x44 -> Node 0 Jul 10 01:03:20.644068 kernel: SRAT: PXM 0 -> APIC 0x46 -> Node 0 Jul 10 01:03:20.644073 kernel: SRAT: PXM 0 -> APIC 0x48 -> Node 0 Jul 10 01:03:20.644085 kernel: SRAT: PXM 0 -> APIC 0x4a -> Node 0 Jul 10 01:03:20.644091 kernel: SRAT: PXM 0 -> APIC 0x4c -> Node 0 Jul 10 01:03:20.644095 kernel: SRAT: PXM 0 -> APIC 0x4e -> Node 0 Jul 10 01:03:20.644100 kernel: SRAT: PXM 0 -> APIC 0x50 -> Node 0 Jul 10 01:03:20.644105 kernel: SRAT: PXM 0 -> APIC 0x52 -> Node 0 Jul 10 01:03:20.644109 kernel: SRAT: PXM 0 -> APIC 0x54 -> Node 0 Jul 10 01:03:20.644114 kernel: SRAT: PXM 0 -> APIC 0x56 -> Node 0 Jul 10 01:03:20.644118 kernel: SRAT: PXM 0 -> APIC 0x58 -> Node 0 Jul 10 01:03:20.644124 kernel: SRAT: PXM 0 -> APIC 0x5a -> Node 0 Jul 10 01:03:20.644129 kernel: SRAT: PXM 0 -> APIC 0x5c -> Node 0 Jul 10 01:03:20.644134 kernel: SRAT: PXM 0 -> APIC 0x5e -> Node 0 Jul 10 01:03:20.644139 kernel: SRAT: PXM 0 -> APIC 0x60 -> Node 0 Jul 10 01:03:20.644143 kernel: SRAT: PXM 0 -> APIC 0x62 -> Node 0 Jul 10 01:03:20.644148 kernel: SRAT: PXM 0 -> APIC 0x64 -> Node 0 Jul 10 01:03:20.644152 kernel: SRAT: PXM 0 -> APIC 0x66 -> Node 0 Jul 10 01:03:20.644157 kernel: SRAT: PXM 0 -> APIC 0x68 -> Node 0 Jul 10 01:03:20.644161 kernel: SRAT: PXM 0 -> APIC 0x6a -> Node 0 Jul 10 01:03:20.644166 kernel: SRAT: PXM 0 -> APIC 0x6c -> Node 0 Jul 10 01:03:20.644171 kernel: SRAT: PXM 0 -> APIC 0x6e -> Node 0 Jul 10 01:03:20.644176 kernel: SRAT: PXM 0 -> APIC 0x70 -> Node 0 Jul 10 01:03:20.644181 kernel: SRAT: PXM 0 -> APIC 0x72 -> Node 0 Jul 10 01:03:20.644185 kernel: SRAT: PXM 0 -> APIC 0x74 -> Node 0 Jul 10 01:03:20.644190 kernel: SRAT: PXM 0 -> APIC 0x76 -> Node 0 Jul 10 01:03:20.644194 kernel: SRAT: PXM 0 -> APIC 0x78 -> Node 0 Jul 10 01:03:20.644203 kernel: SRAT: PXM 0 -> APIC 0x7a -> Node 0 Jul 10 01:03:20.644208 kernel: SRAT: PXM 0 -> APIC 0x7c -> Node 0 Jul 10 01:03:20.644213 kernel: SRAT: PXM 0 -> APIC 0x7e -> Node 0 Jul 10 01:03:20.644218 kernel: SRAT: PXM 0 -> APIC 0x80 -> Node 0 Jul 10 01:03:20.644224 kernel: SRAT: PXM 0 -> APIC 0x82 -> Node 0 Jul 10 01:03:20.644229 kernel: SRAT: PXM 0 -> APIC 0x84 -> Node 0 Jul 10 01:03:20.644234 kernel: SRAT: PXM 0 -> APIC 0x86 -> Node 0 Jul 10 01:03:20.644239 kernel: SRAT: PXM 0 -> APIC 0x88 -> Node 0 Jul 10 01:03:20.644244 kernel: SRAT: PXM 0 -> APIC 0x8a -> Node 0 Jul 10 01:03:20.644249 kernel: SRAT: PXM 0 -> APIC 0x8c -> Node 0 Jul 10 01:03:20.644254 kernel: SRAT: PXM 0 -> APIC 0x8e -> Node 0 Jul 10 01:03:20.644260 kernel: SRAT: PXM 0 -> APIC 0x90 -> Node 0 Jul 10 01:03:20.644265 kernel: SRAT: PXM 0 -> APIC 0x92 -> Node 0 Jul 10 01:03:20.644270 kernel: SRAT: PXM 0 -> APIC 0x94 -> Node 0 Jul 10 01:03:20.644275 kernel: SRAT: PXM 0 -> APIC 0x96 -> Node 0 Jul 10 01:03:20.644279 kernel: SRAT: PXM 0 -> APIC 0x98 -> Node 0 Jul 10 01:03:20.644284 kernel: SRAT: PXM 0 -> APIC 0x9a -> Node 0 Jul 10 01:03:20.644289 kernel: SRAT: PXM 0 -> APIC 0x9c -> Node 0 Jul 10 01:03:20.644294 kernel: SRAT: PXM 0 -> APIC 0x9e -> Node 0 Jul 10 01:03:20.644299 kernel: SRAT: PXM 0 -> APIC 0xa0 -> Node 0 Jul 10 01:03:20.644304 kernel: SRAT: PXM 0 -> APIC 0xa2 -> Node 0 Jul 10 01:03:20.644310 kernel: SRAT: PXM 0 -> APIC 0xa4 -> Node 0 Jul 10 01:03:20.644315 kernel: SRAT: PXM 0 -> APIC 0xa6 -> Node 0 Jul 10 01:03:20.644320 kernel: SRAT: PXM 0 -> APIC 0xa8 -> Node 0 Jul 10 01:03:20.644325 kernel: SRAT: PXM 0 -> APIC 0xaa -> Node 0 Jul 10 01:03:20.644330 kernel: SRAT: PXM 0 -> APIC 0xac -> Node 0 Jul 10 01:03:20.644335 kernel: SRAT: PXM 0 -> APIC 0xae -> Node 0 Jul 10 01:03:20.644340 kernel: SRAT: PXM 0 -> APIC 0xb0 -> Node 0 Jul 10 01:03:20.644344 kernel: SRAT: PXM 0 -> APIC 0xb2 -> Node 0 Jul 10 01:03:20.644349 kernel: SRAT: PXM 0 -> APIC 0xb4 -> Node 0 Jul 10 01:03:20.644354 kernel: SRAT: PXM 0 -> APIC 0xb6 -> Node 0 Jul 10 01:03:20.644360 kernel: SRAT: PXM 0 -> APIC 0xb8 -> Node 0 Jul 10 01:03:20.644365 kernel: SRAT: PXM 0 -> APIC 0xba -> Node 0 Jul 10 01:03:20.644370 kernel: SRAT: PXM 0 -> APIC 0xbc -> Node 0 Jul 10 01:03:20.644375 kernel: SRAT: PXM 0 -> APIC 0xbe -> Node 0 Jul 10 01:03:20.644380 kernel: SRAT: PXM 0 -> APIC 0xc0 -> Node 0 Jul 10 01:03:20.644385 kernel: SRAT: PXM 0 -> APIC 0xc2 -> Node 0 Jul 10 01:03:20.644390 kernel: SRAT: PXM 0 -> APIC 0xc4 -> Node 0 Jul 10 01:03:20.644395 kernel: SRAT: PXM 0 -> APIC 0xc6 -> Node 0 Jul 10 01:03:20.644400 kernel: SRAT: PXM 0 -> APIC 0xc8 -> Node 0 Jul 10 01:03:20.644405 kernel: SRAT: PXM 0 -> APIC 0xca -> Node 0 Jul 10 01:03:20.644410 kernel: SRAT: PXM 0 -> APIC 0xcc -> Node 0 Jul 10 01:03:20.644415 kernel: SRAT: PXM 0 -> APIC 0xce -> Node 0 Jul 10 01:03:20.644420 kernel: SRAT: PXM 0 -> APIC 0xd0 -> Node 0 Jul 10 01:03:20.644425 kernel: SRAT: PXM 0 -> APIC 0xd2 -> Node 0 Jul 10 01:03:20.644430 kernel: SRAT: PXM 0 -> APIC 0xd4 -> Node 0 Jul 10 01:03:20.644435 kernel: SRAT: PXM 0 -> APIC 0xd6 -> Node 0 Jul 10 01:03:20.644440 kernel: SRAT: PXM 0 -> APIC 0xd8 -> Node 0 Jul 10 01:03:20.644445 kernel: SRAT: PXM 0 -> APIC 0xda -> Node 0 Jul 10 01:03:20.644450 kernel: SRAT: PXM 0 -> APIC 0xdc -> Node 0 Jul 10 01:03:20.644455 kernel: SRAT: PXM 0 -> APIC 0xde -> Node 0 Jul 10 01:03:20.644461 kernel: SRAT: PXM 0 -> APIC 0xe0 -> Node 0 Jul 10 01:03:20.644466 kernel: SRAT: PXM 0 -> APIC 0xe2 -> Node 0 Jul 10 01:03:20.644471 kernel: SRAT: PXM 0 -> APIC 0xe4 -> Node 0 Jul 10 01:03:20.644476 kernel: SRAT: PXM 0 -> APIC 0xe6 -> Node 0 Jul 10 01:03:20.644481 kernel: SRAT: PXM 0 -> APIC 0xe8 -> Node 0 Jul 10 01:03:20.644486 kernel: SRAT: PXM 0 -> APIC 0xea -> Node 0 Jul 10 01:03:20.644490 kernel: SRAT: PXM 0 -> APIC 0xec -> Node 0 Jul 10 01:03:20.644495 kernel: SRAT: PXM 0 -> APIC 0xee -> Node 0 Jul 10 01:03:20.644500 kernel: SRAT: PXM 0 -> APIC 0xf0 -> Node 0 Jul 10 01:03:20.644506 kernel: SRAT: PXM 0 -> APIC 0xf2 -> Node 0 Jul 10 01:03:20.644511 kernel: SRAT: PXM 0 -> APIC 0xf4 -> Node 0 Jul 10 01:03:20.644516 kernel: SRAT: PXM 0 -> APIC 0xf6 -> Node 0 Jul 10 01:03:20.644521 kernel: SRAT: PXM 0 -> APIC 0xf8 -> Node 0 Jul 10 01:03:20.644526 kernel: SRAT: PXM 0 -> APIC 0xfa -> Node 0 Jul 10 01:03:20.644531 kernel: SRAT: PXM 0 -> APIC 0xfc -> Node 0 Jul 10 01:03:20.644536 kernel: SRAT: PXM 0 -> APIC 0xfe -> Node 0 Jul 10 01:03:20.644541 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Jul 10 01:03:20.644546 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] Jul 10 01:03:20.644551 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000-0xbfffffff] hotplug Jul 10 01:03:20.644557 kernel: NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7fffffff] -> [mem 0x00000000-0x7fffffff] Jul 10 01:03:20.644562 kernel: NODE_DATA(0) allocated [mem 0x7fffa000-0x7fffffff] Jul 10 01:03:20.644568 kernel: Zone ranges: Jul 10 01:03:20.644573 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 10 01:03:20.644578 kernel: DMA32 [mem 0x0000000001000000-0x000000007fffffff] Jul 10 01:03:20.644582 kernel: Normal empty Jul 10 01:03:20.644588 kernel: Movable zone start for each node Jul 10 01:03:20.644593 kernel: Early memory node ranges Jul 10 01:03:20.644598 kernel: node 0: [mem 0x0000000000001000-0x000000000009dfff] Jul 10 01:03:20.644602 kernel: node 0: [mem 0x0000000000100000-0x000000007fedffff] Jul 10 01:03:20.644608 kernel: node 0: [mem 0x000000007ff00000-0x000000007fffffff] Jul 10 01:03:20.644613 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007fffffff] Jul 10 01:03:20.644619 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 10 01:03:20.644624 kernel: On node 0, zone DMA: 98 pages in unavailable ranges Jul 10 01:03:20.644629 kernel: On node 0, zone DMA32: 32 pages in unavailable ranges Jul 10 01:03:20.644634 kernel: ACPI: PM-Timer IO Port: 0x1008 Jul 10 01:03:20.644639 kernel: system APIC only can use physical flat Jul 10 01:03:20.644645 kernel: ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) Jul 10 01:03:20.644672 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Jul 10 01:03:20.644695 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Jul 10 01:03:20.644700 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Jul 10 01:03:20.644705 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Jul 10 01:03:20.644710 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Jul 10 01:03:20.644715 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Jul 10 01:03:20.644720 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Jul 10 01:03:20.644725 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Jul 10 01:03:20.644730 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Jul 10 01:03:20.644735 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Jul 10 01:03:20.644741 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Jul 10 01:03:20.644746 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Jul 10 01:03:20.644751 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Jul 10 01:03:20.644755 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Jul 10 01:03:20.644760 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Jul 10 01:03:20.644766 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Jul 10 01:03:20.644771 kernel: ACPI: LAPIC_NMI (acpi_id[0x11] high edge lint[0x1]) Jul 10 01:03:20.644775 kernel: ACPI: LAPIC_NMI (acpi_id[0x12] high edge lint[0x1]) Jul 10 01:03:20.644781 kernel: ACPI: LAPIC_NMI (acpi_id[0x13] high edge lint[0x1]) Jul 10 01:03:20.644786 kernel: ACPI: LAPIC_NMI (acpi_id[0x14] high edge lint[0x1]) Jul 10 01:03:20.644792 kernel: ACPI: LAPIC_NMI (acpi_id[0x15] high edge lint[0x1]) Jul 10 01:03:20.644797 kernel: ACPI: LAPIC_NMI (acpi_id[0x16] high edge lint[0x1]) Jul 10 01:03:20.644802 kernel: ACPI: LAPIC_NMI (acpi_id[0x17] high edge lint[0x1]) Jul 10 01:03:20.644806 kernel: ACPI: LAPIC_NMI (acpi_id[0x18] high edge lint[0x1]) Jul 10 01:03:20.644811 kernel: ACPI: LAPIC_NMI (acpi_id[0x19] high edge lint[0x1]) Jul 10 01:03:20.644816 kernel: ACPI: LAPIC_NMI (acpi_id[0x1a] high edge lint[0x1]) Jul 10 01:03:20.644821 kernel: ACPI: LAPIC_NMI (acpi_id[0x1b] high edge lint[0x1]) Jul 10 01:03:20.644826 kernel: ACPI: LAPIC_NMI (acpi_id[0x1c] high edge lint[0x1]) Jul 10 01:03:20.644831 kernel: ACPI: LAPIC_NMI (acpi_id[0x1d] high edge lint[0x1]) Jul 10 01:03:20.644837 kernel: ACPI: LAPIC_NMI (acpi_id[0x1e] high edge lint[0x1]) Jul 10 01:03:20.644842 kernel: ACPI: LAPIC_NMI (acpi_id[0x1f] high edge lint[0x1]) Jul 10 01:03:20.644847 kernel: ACPI: LAPIC_NMI (acpi_id[0x20] high edge lint[0x1]) Jul 10 01:03:20.644852 kernel: ACPI: LAPIC_NMI (acpi_id[0x21] high edge lint[0x1]) Jul 10 01:03:20.644857 kernel: ACPI: LAPIC_NMI (acpi_id[0x22] high edge lint[0x1]) Jul 10 01:03:20.644862 kernel: ACPI: LAPIC_NMI (acpi_id[0x23] high edge lint[0x1]) Jul 10 01:03:20.644867 kernel: ACPI: LAPIC_NMI (acpi_id[0x24] high edge lint[0x1]) Jul 10 01:03:20.644872 kernel: ACPI: LAPIC_NMI (acpi_id[0x25] high edge lint[0x1]) Jul 10 01:03:20.644877 kernel: ACPI: LAPIC_NMI (acpi_id[0x26] high edge lint[0x1]) Jul 10 01:03:20.644882 kernel: ACPI: LAPIC_NMI (acpi_id[0x27] high edge lint[0x1]) Jul 10 01:03:20.644888 kernel: ACPI: LAPIC_NMI (acpi_id[0x28] high edge lint[0x1]) Jul 10 01:03:20.644893 kernel: ACPI: LAPIC_NMI (acpi_id[0x29] high edge lint[0x1]) Jul 10 01:03:20.644898 kernel: ACPI: LAPIC_NMI (acpi_id[0x2a] high edge lint[0x1]) Jul 10 01:03:20.644903 kernel: ACPI: LAPIC_NMI (acpi_id[0x2b] high edge lint[0x1]) Jul 10 01:03:20.644908 kernel: ACPI: LAPIC_NMI (acpi_id[0x2c] high edge lint[0x1]) Jul 10 01:03:20.644913 kernel: ACPI: LAPIC_NMI (acpi_id[0x2d] high edge lint[0x1]) Jul 10 01:03:20.644918 kernel: ACPI: LAPIC_NMI (acpi_id[0x2e] high edge lint[0x1]) Jul 10 01:03:20.644923 kernel: ACPI: LAPIC_NMI (acpi_id[0x2f] high edge lint[0x1]) Jul 10 01:03:20.644928 kernel: ACPI: LAPIC_NMI (acpi_id[0x30] high edge lint[0x1]) Jul 10 01:03:20.644933 kernel: ACPI: LAPIC_NMI (acpi_id[0x31] high edge lint[0x1]) Jul 10 01:03:20.644938 kernel: ACPI: LAPIC_NMI (acpi_id[0x32] high edge lint[0x1]) Jul 10 01:03:20.644943 kernel: ACPI: LAPIC_NMI (acpi_id[0x33] high edge lint[0x1]) Jul 10 01:03:20.644948 kernel: ACPI: LAPIC_NMI (acpi_id[0x34] high edge lint[0x1]) Jul 10 01:03:20.644953 kernel: ACPI: LAPIC_NMI (acpi_id[0x35] high edge lint[0x1]) Jul 10 01:03:20.644958 kernel: ACPI: LAPIC_NMI (acpi_id[0x36] high edge lint[0x1]) Jul 10 01:03:20.644963 kernel: ACPI: LAPIC_NMI (acpi_id[0x37] high edge lint[0x1]) Jul 10 01:03:20.644968 kernel: ACPI: LAPIC_NMI (acpi_id[0x38] high edge lint[0x1]) Jul 10 01:03:20.644973 kernel: ACPI: LAPIC_NMI (acpi_id[0x39] high edge lint[0x1]) Jul 10 01:03:20.644978 kernel: ACPI: LAPIC_NMI (acpi_id[0x3a] high edge lint[0x1]) Jul 10 01:03:20.644984 kernel: ACPI: LAPIC_NMI (acpi_id[0x3b] high edge lint[0x1]) Jul 10 01:03:20.644989 kernel: ACPI: LAPIC_NMI (acpi_id[0x3c] high edge lint[0x1]) Jul 10 01:03:20.644994 kernel: ACPI: LAPIC_NMI (acpi_id[0x3d] high edge lint[0x1]) Jul 10 01:03:20.644999 kernel: ACPI: LAPIC_NMI (acpi_id[0x3e] high edge lint[0x1]) Jul 10 01:03:20.645004 kernel: ACPI: LAPIC_NMI (acpi_id[0x3f] high edge lint[0x1]) Jul 10 01:03:20.645010 kernel: ACPI: LAPIC_NMI (acpi_id[0x40] high edge lint[0x1]) Jul 10 01:03:20.645015 kernel: ACPI: LAPIC_NMI (acpi_id[0x41] high edge lint[0x1]) Jul 10 01:03:20.645020 kernel: ACPI: LAPIC_NMI (acpi_id[0x42] high edge lint[0x1]) Jul 10 01:03:20.645024 kernel: ACPI: LAPIC_NMI (acpi_id[0x43] high edge lint[0x1]) Jul 10 01:03:20.645030 kernel: ACPI: LAPIC_NMI (acpi_id[0x44] high edge lint[0x1]) Jul 10 01:03:20.645035 kernel: ACPI: LAPIC_NMI (acpi_id[0x45] high edge lint[0x1]) Jul 10 01:03:20.645040 kernel: ACPI: LAPIC_NMI (acpi_id[0x46] high edge lint[0x1]) Jul 10 01:03:20.645045 kernel: ACPI: LAPIC_NMI (acpi_id[0x47] high edge lint[0x1]) Jul 10 01:03:20.645050 kernel: ACPI: LAPIC_NMI (acpi_id[0x48] high edge lint[0x1]) Jul 10 01:03:20.645055 kernel: ACPI: LAPIC_NMI (acpi_id[0x49] high edge lint[0x1]) Jul 10 01:03:20.645061 kernel: ACPI: LAPIC_NMI (acpi_id[0x4a] high edge lint[0x1]) Jul 10 01:03:20.645065 kernel: ACPI: LAPIC_NMI (acpi_id[0x4b] high edge lint[0x1]) Jul 10 01:03:20.645070 kernel: ACPI: LAPIC_NMI (acpi_id[0x4c] high edge lint[0x1]) Jul 10 01:03:20.645076 kernel: ACPI: LAPIC_NMI (acpi_id[0x4d] high edge lint[0x1]) Jul 10 01:03:20.645087 kernel: ACPI: LAPIC_NMI (acpi_id[0x4e] high edge lint[0x1]) Jul 10 01:03:20.646848 kernel: ACPI: LAPIC_NMI (acpi_id[0x4f] high edge lint[0x1]) Jul 10 01:03:20.646856 kernel: ACPI: LAPIC_NMI (acpi_id[0x50] high edge lint[0x1]) Jul 10 01:03:20.646861 kernel: ACPI: LAPIC_NMI (acpi_id[0x51] high edge lint[0x1]) Jul 10 01:03:20.646866 kernel: ACPI: LAPIC_NMI (acpi_id[0x52] high edge lint[0x1]) Jul 10 01:03:20.646872 kernel: ACPI: LAPIC_NMI (acpi_id[0x53] high edge lint[0x1]) Jul 10 01:03:20.646877 kernel: ACPI: LAPIC_NMI (acpi_id[0x54] high edge lint[0x1]) Jul 10 01:03:20.646882 kernel: ACPI: LAPIC_NMI (acpi_id[0x55] high edge lint[0x1]) Jul 10 01:03:20.646887 kernel: ACPI: LAPIC_NMI (acpi_id[0x56] high edge lint[0x1]) Jul 10 01:03:20.646894 kernel: ACPI: LAPIC_NMI (acpi_id[0x57] high edge lint[0x1]) Jul 10 01:03:20.646899 kernel: ACPI: LAPIC_NMI (acpi_id[0x58] high edge lint[0x1]) Jul 10 01:03:20.646904 kernel: ACPI: LAPIC_NMI (acpi_id[0x59] high edge lint[0x1]) Jul 10 01:03:20.646909 kernel: ACPI: LAPIC_NMI (acpi_id[0x5a] high edge lint[0x1]) Jul 10 01:03:20.646914 kernel: ACPI: LAPIC_NMI (acpi_id[0x5b] high edge lint[0x1]) Jul 10 01:03:20.646919 kernel: ACPI: LAPIC_NMI (acpi_id[0x5c] high edge lint[0x1]) Jul 10 01:03:20.646924 kernel: ACPI: LAPIC_NMI (acpi_id[0x5d] high edge lint[0x1]) Jul 10 01:03:20.646929 kernel: ACPI: LAPIC_NMI (acpi_id[0x5e] high edge lint[0x1]) Jul 10 01:03:20.646934 kernel: ACPI: LAPIC_NMI (acpi_id[0x5f] high edge lint[0x1]) Jul 10 01:03:20.646940 kernel: ACPI: LAPIC_NMI (acpi_id[0x60] high edge lint[0x1]) Jul 10 01:03:20.646945 kernel: ACPI: LAPIC_NMI (acpi_id[0x61] high edge lint[0x1]) Jul 10 01:03:20.646950 kernel: ACPI: LAPIC_NMI (acpi_id[0x62] high edge lint[0x1]) Jul 10 01:03:20.646955 kernel: ACPI: LAPIC_NMI (acpi_id[0x63] high edge lint[0x1]) Jul 10 01:03:20.646960 kernel: ACPI: LAPIC_NMI (acpi_id[0x64] high edge lint[0x1]) Jul 10 01:03:20.646965 kernel: ACPI: LAPIC_NMI (acpi_id[0x65] high edge lint[0x1]) Jul 10 01:03:20.646970 kernel: ACPI: LAPIC_NMI (acpi_id[0x66] high edge lint[0x1]) Jul 10 01:03:20.646976 kernel: ACPI: LAPIC_NMI (acpi_id[0x67] high edge lint[0x1]) Jul 10 01:03:20.646981 kernel: ACPI: LAPIC_NMI (acpi_id[0x68] high edge lint[0x1]) Jul 10 01:03:20.646985 kernel: ACPI: LAPIC_NMI (acpi_id[0x69] high edge lint[0x1]) Jul 10 01:03:20.646991 kernel: ACPI: LAPIC_NMI (acpi_id[0x6a] high edge lint[0x1]) Jul 10 01:03:20.646997 kernel: ACPI: LAPIC_NMI (acpi_id[0x6b] high edge lint[0x1]) Jul 10 01:03:20.647002 kernel: ACPI: LAPIC_NMI (acpi_id[0x6c] high edge lint[0x1]) Jul 10 01:03:20.647007 kernel: ACPI: LAPIC_NMI (acpi_id[0x6d] high edge lint[0x1]) Jul 10 01:03:20.647012 kernel: ACPI: LAPIC_NMI (acpi_id[0x6e] high edge lint[0x1]) Jul 10 01:03:20.647017 kernel: ACPI: LAPIC_NMI (acpi_id[0x6f] high edge lint[0x1]) Jul 10 01:03:20.647021 kernel: ACPI: LAPIC_NMI (acpi_id[0x70] high edge lint[0x1]) Jul 10 01:03:20.647027 kernel: ACPI: LAPIC_NMI (acpi_id[0x71] high edge lint[0x1]) Jul 10 01:03:20.647032 kernel: ACPI: LAPIC_NMI (acpi_id[0x72] high edge lint[0x1]) Jul 10 01:03:20.647038 kernel: ACPI: LAPIC_NMI (acpi_id[0x73] high edge lint[0x1]) Jul 10 01:03:20.647043 kernel: ACPI: LAPIC_NMI (acpi_id[0x74] high edge lint[0x1]) Jul 10 01:03:20.647048 kernel: ACPI: LAPIC_NMI (acpi_id[0x75] high edge lint[0x1]) Jul 10 01:03:20.647053 kernel: ACPI: LAPIC_NMI (acpi_id[0x76] high edge lint[0x1]) Jul 10 01:03:20.647058 kernel: ACPI: LAPIC_NMI (acpi_id[0x77] high edge lint[0x1]) Jul 10 01:03:20.647063 kernel: ACPI: LAPIC_NMI (acpi_id[0x78] high edge lint[0x1]) Jul 10 01:03:20.647068 kernel: ACPI: LAPIC_NMI (acpi_id[0x79] high edge lint[0x1]) Jul 10 01:03:20.647073 kernel: ACPI: LAPIC_NMI (acpi_id[0x7a] high edge lint[0x1]) Jul 10 01:03:20.647086 kernel: ACPI: LAPIC_NMI (acpi_id[0x7b] high edge lint[0x1]) Jul 10 01:03:20.647092 kernel: ACPI: LAPIC_NMI (acpi_id[0x7c] high edge lint[0x1]) Jul 10 01:03:20.647098 kernel: ACPI: LAPIC_NMI (acpi_id[0x7d] high edge lint[0x1]) Jul 10 01:03:20.647103 kernel: ACPI: LAPIC_NMI (acpi_id[0x7e] high edge lint[0x1]) Jul 10 01:03:20.647108 kernel: ACPI: LAPIC_NMI (acpi_id[0x7f] high edge lint[0x1]) Jul 10 01:03:20.647113 kernel: IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 Jul 10 01:03:20.647118 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge) Jul 10 01:03:20.647123 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 10 01:03:20.647128 kernel: ACPI: HPET id: 0x8086af01 base: 0xfed00000 Jul 10 01:03:20.647134 kernel: TSC deadline timer available Jul 10 01:03:20.647139 kernel: smpboot: Allowing 128 CPUs, 126 hotplug CPUs Jul 10 01:03:20.647145 kernel: [mem 0x80000000-0xefffffff] available for PCI devices Jul 10 01:03:20.647150 kernel: Booting paravirtualized kernel on VMware hypervisor Jul 10 01:03:20.647155 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 10 01:03:20.647161 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:128 nr_node_ids:1 Jul 10 01:03:20.647166 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u262144 Jul 10 01:03:20.647171 kernel: pcpu-alloc: s188696 r8192 d32488 u262144 alloc=1*2097152 Jul 10 01:03:20.647176 kernel: pcpu-alloc: [0] 000 001 002 003 004 005 006 007 Jul 10 01:03:20.647181 kernel: pcpu-alloc: [0] 008 009 010 011 012 013 014 015 Jul 10 01:03:20.647186 kernel: pcpu-alloc: [0] 016 017 018 019 020 021 022 023 Jul 10 01:03:20.647192 kernel: pcpu-alloc: [0] 024 025 026 027 028 029 030 031 Jul 10 01:03:20.647197 kernel: pcpu-alloc: [0] 032 033 034 035 036 037 038 039 Jul 10 01:03:20.647202 kernel: pcpu-alloc: [0] 040 041 042 043 044 045 046 047 Jul 10 01:03:20.647207 kernel: pcpu-alloc: [0] 048 049 050 051 052 053 054 055 Jul 10 01:03:20.647218 kernel: pcpu-alloc: [0] 056 057 058 059 060 061 062 063 Jul 10 01:03:20.647225 kernel: pcpu-alloc: [0] 064 065 066 067 068 069 070 071 Jul 10 01:03:20.647230 kernel: pcpu-alloc: [0] 072 073 074 075 076 077 078 079 Jul 10 01:03:20.647235 kernel: pcpu-alloc: [0] 080 081 082 083 084 085 086 087 Jul 10 01:03:20.647242 kernel: pcpu-alloc: [0] 088 089 090 091 092 093 094 095 Jul 10 01:03:20.647247 kernel: pcpu-alloc: [0] 096 097 098 099 100 101 102 103 Jul 10 01:03:20.647252 kernel: pcpu-alloc: [0] 104 105 106 107 108 109 110 111 Jul 10 01:03:20.647258 kernel: pcpu-alloc: [0] 112 113 114 115 116 117 118 119 Jul 10 01:03:20.647263 kernel: pcpu-alloc: [0] 120 121 122 123 124 125 126 127 Jul 10 01:03:20.647268 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515808 Jul 10 01:03:20.647273 kernel: Policy zone: DMA32 Jul 10 01:03:20.647280 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 01:03:20.647287 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 10 01:03:20.647292 kernel: printk: log_buf_len individual max cpu contribution: 4096 bytes Jul 10 01:03:20.647298 kernel: printk: log_buf_len total cpu_extra contributions: 520192 bytes Jul 10 01:03:20.647303 kernel: printk: log_buf_len min size: 262144 bytes Jul 10 01:03:20.647308 kernel: printk: log_buf_len: 1048576 bytes Jul 10 01:03:20.647314 kernel: printk: early log buf free: 239728(91%) Jul 10 01:03:20.647319 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 10 01:03:20.647324 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 10 01:03:20.647330 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 10 01:03:20.647337 kernel: Memory: 1940392K/2096628K available (12295K kernel code, 2275K rwdata, 13724K rodata, 47472K init, 4108K bss, 155976K reserved, 0K cma-reserved) Jul 10 01:03:20.647342 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=128, Nodes=1 Jul 10 01:03:20.647347 kernel: ftrace: allocating 34602 entries in 136 pages Jul 10 01:03:20.647353 kernel: ftrace: allocated 136 pages with 2 groups Jul 10 01:03:20.647359 kernel: rcu: Hierarchical RCU implementation. Jul 10 01:03:20.647365 kernel: rcu: RCU event tracing is enabled. Jul 10 01:03:20.647372 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=128. Jul 10 01:03:20.647377 kernel: Rude variant of Tasks RCU enabled. Jul 10 01:03:20.647383 kernel: Tracing variant of Tasks RCU enabled. Jul 10 01:03:20.647388 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 10 01:03:20.647394 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=128 Jul 10 01:03:20.647399 kernel: NR_IRQS: 33024, nr_irqs: 1448, preallocated irqs: 16 Jul 10 01:03:20.647405 kernel: random: crng init done Jul 10 01:03:20.647410 kernel: Console: colour VGA+ 80x25 Jul 10 01:03:20.647415 kernel: printk: console [tty0] enabled Jul 10 01:03:20.647422 kernel: printk: console [ttyS0] enabled Jul 10 01:03:20.647427 kernel: ACPI: Core revision 20210730 Jul 10 01:03:20.647433 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns Jul 10 01:03:20.647438 kernel: APIC: Switch to symmetric I/O mode setup Jul 10 01:03:20.647444 kernel: x2apic enabled Jul 10 01:03:20.647451 kernel: Switched APIC routing to physical x2apic. Jul 10 01:03:20.647456 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 10 01:03:20.647462 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 10 01:03:20.647467 kernel: Calibrating delay loop (skipped) preset value.. 6816.00 BogoMIPS (lpj=3408000) Jul 10 01:03:20.647474 kernel: Disabled fast string operations Jul 10 01:03:20.647479 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Jul 10 01:03:20.647484 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Jul 10 01:03:20.647490 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 10 01:03:20.647496 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Jul 10 01:03:20.647501 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit Jul 10 01:03:20.647507 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall Jul 10 01:03:20.647512 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Jul 10 01:03:20.647518 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Jul 10 01:03:20.647524 kernel: RETBleed: Mitigation: Enhanced IBRS Jul 10 01:03:20.647530 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 10 01:03:20.647536 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 10 01:03:20.647541 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jul 10 01:03:20.647546 kernel: SRBDS: Unknown: Dependent on hypervisor status Jul 10 01:03:20.647552 kernel: GDS: Unknown: Dependent on hypervisor status Jul 10 01:03:20.647557 kernel: ITS: Mitigation: Aligned branch/return thunks Jul 10 01:03:20.647563 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 10 01:03:20.647569 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 10 01:03:20.647575 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 10 01:03:20.647580 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 10 01:03:20.647586 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'compacted' format. Jul 10 01:03:20.647591 kernel: Freeing SMP alternatives memory: 32K Jul 10 01:03:20.647596 kernel: pid_max: default: 131072 minimum: 1024 Jul 10 01:03:20.647602 kernel: LSM: Security Framework initializing Jul 10 01:03:20.647607 kernel: SELinux: Initializing. Jul 10 01:03:20.647613 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 10 01:03:20.647619 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 10 01:03:20.647625 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Jul 10 01:03:20.647630 kernel: Performance Events: Skylake events, core PMU driver. Jul 10 01:03:20.647636 kernel: core: CPUID marked event: 'cpu cycles' unavailable Jul 10 01:03:20.647641 kernel: core: CPUID marked event: 'instructions' unavailable Jul 10 01:03:20.647647 kernel: core: CPUID marked event: 'bus cycles' unavailable Jul 10 01:03:20.647652 kernel: core: CPUID marked event: 'cache references' unavailable Jul 10 01:03:20.647657 kernel: core: CPUID marked event: 'cache misses' unavailable Jul 10 01:03:20.647662 kernel: core: CPUID marked event: 'branch instructions' unavailable Jul 10 01:03:20.647669 kernel: core: CPUID marked event: 'branch misses' unavailable Jul 10 01:03:20.647674 kernel: ... version: 1 Jul 10 01:03:20.647679 kernel: ... bit width: 48 Jul 10 01:03:20.647685 kernel: ... generic registers: 4 Jul 10 01:03:20.647690 kernel: ... value mask: 0000ffffffffffff Jul 10 01:03:20.647695 kernel: ... max period: 000000007fffffff Jul 10 01:03:20.647701 kernel: ... fixed-purpose events: 0 Jul 10 01:03:20.647706 kernel: ... event mask: 000000000000000f Jul 10 01:03:20.647711 kernel: signal: max sigframe size: 1776 Jul 10 01:03:20.647718 kernel: rcu: Hierarchical SRCU implementation. Jul 10 01:03:20.647724 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jul 10 01:03:20.647729 kernel: smp: Bringing up secondary CPUs ... Jul 10 01:03:20.647734 kernel: x86: Booting SMP configuration: Jul 10 01:03:20.647740 kernel: .... node #0, CPUs: #1 Jul 10 01:03:20.647745 kernel: Disabled fast string operations Jul 10 01:03:20.647750 kernel: smpboot: CPU 1 Converting physical 2 to logical package 1 Jul 10 01:03:20.647756 kernel: smpboot: CPU 1 Converting physical 0 to logical die 1 Jul 10 01:03:20.647761 kernel: smp: Brought up 1 node, 2 CPUs Jul 10 01:03:20.647766 kernel: smpboot: Max logical packages: 128 Jul 10 01:03:20.647773 kernel: smpboot: Total of 2 processors activated (13632.00 BogoMIPS) Jul 10 01:03:20.647779 kernel: devtmpfs: initialized Jul 10 01:03:20.647785 kernel: x86/mm: Memory block size: 128MB Jul 10 01:03:20.647790 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7feff000-0x7fefffff] (4096 bytes) Jul 10 01:03:20.647796 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 10 01:03:20.647820 kernel: futex hash table entries: 32768 (order: 9, 2097152 bytes, linear) Jul 10 01:03:20.647825 kernel: pinctrl core: initialized pinctrl subsystem Jul 10 01:03:20.647831 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 10 01:03:20.647836 kernel: audit: initializing netlink subsys (disabled) Jul 10 01:03:20.647859 kernel: audit: type=2000 audit(1752109399.082:1): state=initialized audit_enabled=0 res=1 Jul 10 01:03:20.647865 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 10 01:03:20.647870 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 10 01:03:20.647876 kernel: cpuidle: using governor menu Jul 10 01:03:20.647881 kernel: Simple Boot Flag at 0x36 set to 0x80 Jul 10 01:03:20.647887 kernel: ACPI: bus type PCI registered Jul 10 01:03:20.647892 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 10 01:03:20.647898 kernel: dca service started, version 1.12.1 Jul 10 01:03:20.647903 kernel: PCI: MMCONFIG for domain 0000 [bus 00-7f] at [mem 0xf0000000-0xf7ffffff] (base 0xf0000000) Jul 10 01:03:20.647909 kernel: PCI: MMCONFIG at [mem 0xf0000000-0xf7ffffff] reserved in E820 Jul 10 01:03:20.647915 kernel: PCI: Using configuration type 1 for base access Jul 10 01:03:20.647920 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 10 01:03:20.647926 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 10 01:03:20.647931 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 10 01:03:20.647937 kernel: ACPI: Added _OSI(Module Device) Jul 10 01:03:20.647942 kernel: ACPI: Added _OSI(Processor Device) Jul 10 01:03:20.647947 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 10 01:03:20.647953 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 10 01:03:20.647959 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 10 01:03:20.647965 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 10 01:03:20.647970 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 10 01:03:20.647975 kernel: ACPI: [Firmware Bug]: BIOS _OSI(Linux) query ignored Jul 10 01:03:20.647981 kernel: ACPI: Interpreter enabled Jul 10 01:03:20.647986 kernel: ACPI: PM: (supports S0 S1 S5) Jul 10 01:03:20.647991 kernel: ACPI: Using IOAPIC for interrupt routing Jul 10 01:03:20.647997 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 10 01:03:20.648002 kernel: ACPI: Enabled 4 GPEs in block 00 to 0F Jul 10 01:03:20.648009 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-7f]) Jul 10 01:03:20.648090 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 10 01:03:20.648143 kernel: acpi PNP0A03:00: _OSC: platform does not support [AER LTR] Jul 10 01:03:20.648190 kernel: acpi PNP0A03:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability] Jul 10 01:03:20.648197 kernel: PCI host bridge to bus 0000:00 Jul 10 01:03:20.648246 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 10 01:03:20.648292 kernel: pci_bus 0000:00: root bus resource [mem 0x000cc000-0x000dbfff window] Jul 10 01:03:20.648334 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 10 01:03:20.648375 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 10 01:03:20.648416 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xfeff window] Jul 10 01:03:20.648457 kernel: pci_bus 0000:00: root bus resource [bus 00-7f] Jul 10 01:03:20.648510 kernel: pci 0000:00:00.0: [8086:7190] type 00 class 0x060000 Jul 10 01:03:20.648563 kernel: pci 0000:00:01.0: [8086:7191] type 01 class 0x060400 Jul 10 01:03:20.648621 kernel: pci 0000:00:07.0: [8086:7110] type 00 class 0x060100 Jul 10 01:03:20.648696 kernel: pci 0000:00:07.1: [8086:7111] type 00 class 0x01018a Jul 10 01:03:20.648746 kernel: pci 0000:00:07.1: reg 0x20: [io 0x1060-0x106f] Jul 10 01:03:20.648811 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 10 01:03:20.648858 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 10 01:03:20.648925 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 10 01:03:20.648976 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 10 01:03:20.649028 kernel: pci 0000:00:07.3: [8086:7113] type 00 class 0x068000 Jul 10 01:03:20.649084 kernel: pci 0000:00:07.3: quirk: [io 0x1000-0x103f] claimed by PIIX4 ACPI Jul 10 01:03:20.649136 kernel: pci 0000:00:07.3: quirk: [io 0x1040-0x104f] claimed by PIIX4 SMB Jul 10 01:03:20.649189 kernel: pci 0000:00:07.7: [15ad:0740] type 00 class 0x088000 Jul 10 01:03:20.649237 kernel: pci 0000:00:07.7: reg 0x10: [io 0x1080-0x10bf] Jul 10 01:03:20.649285 kernel: pci 0000:00:07.7: reg 0x14: [mem 0xfebfe000-0xfebfffff 64bit] Jul 10 01:03:20.649339 kernel: pci 0000:00:0f.0: [15ad:0405] type 00 class 0x030000 Jul 10 01:03:20.649387 kernel: pci 0000:00:0f.0: reg 0x10: [io 0x1070-0x107f] Jul 10 01:03:20.649435 kernel: pci 0000:00:0f.0: reg 0x14: [mem 0xe8000000-0xefffffff pref] Jul 10 01:03:20.649482 kernel: pci 0000:00:0f.0: reg 0x18: [mem 0xfe000000-0xfe7fffff] Jul 10 01:03:20.649529 kernel: pci 0000:00:0f.0: reg 0x30: [mem 0x00000000-0x00007fff pref] Jul 10 01:03:20.649576 kernel: pci 0000:00:0f.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 10 01:03:20.649631 kernel: pci 0000:00:11.0: [15ad:0790] type 01 class 0x060401 Jul 10 01:03:20.649686 kernel: pci 0000:00:15.0: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.649734 kernel: pci 0000:00:15.0: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.649785 kernel: pci 0000:00:15.1: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.649836 kernel: pci 0000:00:15.1: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.649891 kernel: pci 0000:00:15.2: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.649939 kernel: pci 0000:00:15.2: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.649994 kernel: pci 0000:00:15.3: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.650042 kernel: pci 0000:00:15.3: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.650102 kernel: pci 0000:00:15.4: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.650151 kernel: pci 0000:00:15.4: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.650203 kernel: pci 0000:00:15.5: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.650252 kernel: pci 0000:00:15.5: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.650306 kernel: pci 0000:00:15.6: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.650354 kernel: pci 0000:00:15.6: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.650406 kernel: pci 0000:00:15.7: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.650455 kernel: pci 0000:00:15.7: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.650506 kernel: pci 0000:00:16.0: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.650554 kernel: pci 0000:00:16.0: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.650609 kernel: pci 0000:00:16.1: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.650656 kernel: pci 0000:00:16.1: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.650708 kernel: pci 0000:00:16.2: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.650755 kernel: pci 0000:00:16.2: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.650809 kernel: pci 0000:00:16.3: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.650860 kernel: pci 0000:00:16.3: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.650911 kernel: pci 0000:00:16.4: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.650959 kernel: pci 0000:00:16.4: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.651010 kernel: pci 0000:00:16.5: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.651059 kernel: pci 0000:00:16.5: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.657640 kernel: pci 0000:00:16.6: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.657704 kernel: pci 0000:00:16.6: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.657765 kernel: pci 0000:00:16.7: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.657830 kernel: pci 0000:00:16.7: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.657884 kernel: pci 0000:00:17.0: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.657933 kernel: pci 0000:00:17.0: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.657985 kernel: pci 0000:00:17.1: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.658033 kernel: pci 0000:00:17.1: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.658104 kernel: pci 0000:00:17.2: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.658155 kernel: pci 0000:00:17.2: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.658207 kernel: pci 0000:00:17.3: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.658255 kernel: pci 0000:00:17.3: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.658306 kernel: pci 0000:00:17.4: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.658354 kernel: pci 0000:00:17.4: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.658408 kernel: pci 0000:00:17.5: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.658456 kernel: pci 0000:00:17.5: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.658507 kernel: pci 0000:00:17.6: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.658556 kernel: pci 0000:00:17.6: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.658609 kernel: pci 0000:00:17.7: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.658658 kernel: pci 0000:00:17.7: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.658710 kernel: pci 0000:00:18.0: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.658762 kernel: pci 0000:00:18.0: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.658813 kernel: pci 0000:00:18.1: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.658862 kernel: pci 0000:00:18.1: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.658913 kernel: pci 0000:00:18.2: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.658961 kernel: pci 0000:00:18.2: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.659013 kernel: pci 0000:00:18.3: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.659063 kernel: pci 0000:00:18.3: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.659125 kernel: pci 0000:00:18.4: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.659174 kernel: pci 0000:00:18.4: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.659225 kernel: pci 0000:00:18.5: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.659273 kernel: pci 0000:00:18.5: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.659324 kernel: pci 0000:00:18.6: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.659375 kernel: pci 0000:00:18.6: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.659427 kernel: pci 0000:00:18.7: [15ad:07a0] type 01 class 0x060400 Jul 10 01:03:20.659475 kernel: pci 0000:00:18.7: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.659530 kernel: pci_bus 0000:01: extended config space not accessible Jul 10 01:03:20.659580 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 10 01:03:20.659630 kernel: pci_bus 0000:02: extended config space not accessible Jul 10 01:03:20.659644 kernel: acpiphp: Slot [32] registered Jul 10 01:03:20.659650 kernel: acpiphp: Slot [33] registered Jul 10 01:03:20.659656 kernel: acpiphp: Slot [34] registered Jul 10 01:03:20.659661 kernel: acpiphp: Slot [35] registered Jul 10 01:03:20.659667 kernel: acpiphp: Slot [36] registered Jul 10 01:03:20.659672 kernel: acpiphp: Slot [37] registered Jul 10 01:03:20.659677 kernel: acpiphp: Slot [38] registered Jul 10 01:03:20.659683 kernel: acpiphp: Slot [39] registered Jul 10 01:03:20.659688 kernel: acpiphp: Slot [40] registered Jul 10 01:03:20.659694 kernel: acpiphp: Slot [41] registered Jul 10 01:03:20.659700 kernel: acpiphp: Slot [42] registered Jul 10 01:03:20.659706 kernel: acpiphp: Slot [43] registered Jul 10 01:03:20.659711 kernel: acpiphp: Slot [44] registered Jul 10 01:03:20.659717 kernel: acpiphp: Slot [45] registered Jul 10 01:03:20.659722 kernel: acpiphp: Slot [46] registered Jul 10 01:03:20.659728 kernel: acpiphp: Slot [47] registered Jul 10 01:03:20.659733 kernel: acpiphp: Slot [48] registered Jul 10 01:03:20.659739 kernel: acpiphp: Slot [49] registered Jul 10 01:03:20.659744 kernel: acpiphp: Slot [50] registered Jul 10 01:03:20.659750 kernel: acpiphp: Slot [51] registered Jul 10 01:03:20.659756 kernel: acpiphp: Slot [52] registered Jul 10 01:03:20.659761 kernel: acpiphp: Slot [53] registered Jul 10 01:03:20.659767 kernel: acpiphp: Slot [54] registered Jul 10 01:03:20.659772 kernel: acpiphp: Slot [55] registered Jul 10 01:03:20.659777 kernel: acpiphp: Slot [56] registered Jul 10 01:03:20.659783 kernel: acpiphp: Slot [57] registered Jul 10 01:03:20.659788 kernel: acpiphp: Slot [58] registered Jul 10 01:03:20.659793 kernel: acpiphp: Slot [59] registered Jul 10 01:03:20.659799 kernel: acpiphp: Slot [60] registered Jul 10 01:03:20.659805 kernel: acpiphp: Slot [61] registered Jul 10 01:03:20.659810 kernel: acpiphp: Slot [62] registered Jul 10 01:03:20.659816 kernel: acpiphp: Slot [63] registered Jul 10 01:03:20.659864 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] (subtractive decode) Jul 10 01:03:20.659912 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 10 01:03:20.659959 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 10 01:03:20.660006 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 10 01:03:20.660052 kernel: pci 0000:00:11.0: bridge window [mem 0x000a0000-0x000bffff window] (subtractive decode) Jul 10 01:03:20.660122 kernel: pci 0000:00:11.0: bridge window [mem 0x000cc000-0x000dbfff window] (subtractive decode) Jul 10 01:03:20.660170 kernel: pci 0000:00:11.0: bridge window [mem 0xc0000000-0xfebfffff window] (subtractive decode) Jul 10 01:03:20.660217 kernel: pci 0000:00:11.0: bridge window [io 0x0000-0x0cf7 window] (subtractive decode) Jul 10 01:03:20.660263 kernel: pci 0000:00:11.0: bridge window [io 0x0d00-0xfeff window] (subtractive decode) Jul 10 01:03:20.660316 kernel: pci 0000:03:00.0: [15ad:07c0] type 00 class 0x010700 Jul 10 01:03:20.660365 kernel: pci 0000:03:00.0: reg 0x10: [io 0x4000-0x4007] Jul 10 01:03:20.660414 kernel: pci 0000:03:00.0: reg 0x14: [mem 0xfd5f8000-0xfd5fffff 64bit] Jul 10 01:03:20.660465 kernel: pci 0000:03:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 10 01:03:20.660513 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Jul 10 01:03:20.660562 kernel: pci 0000:03:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 10 01:03:20.660610 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 10 01:03:20.660675 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 10 01:03:20.660738 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 10 01:03:20.660818 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 10 01:03:20.660869 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 10 01:03:20.660917 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 10 01:03:20.660964 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 10 01:03:20.661012 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 10 01:03:20.661060 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 10 01:03:20.661130 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 10 01:03:20.661180 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 10 01:03:20.661228 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 10 01:03:20.661278 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 10 01:03:20.661326 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 10 01:03:20.661373 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 10 01:03:20.661420 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 10 01:03:20.661467 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 10 01:03:20.661517 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 10 01:03:20.661565 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 10 01:03:20.661612 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 10 01:03:20.661661 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 10 01:03:20.661708 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 10 01:03:20.661755 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 10 01:03:20.661802 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 10 01:03:20.661852 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 10 01:03:20.661900 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 10 01:03:20.661954 kernel: pci 0000:0b:00.0: [15ad:07b0] type 00 class 0x020000 Jul 10 01:03:20.662004 kernel: pci 0000:0b:00.0: reg 0x10: [mem 0xfd4fc000-0xfd4fcfff] Jul 10 01:03:20.662053 kernel: pci 0000:0b:00.0: reg 0x14: [mem 0xfd4fd000-0xfd4fdfff] Jul 10 01:03:20.662120 kernel: pci 0000:0b:00.0: reg 0x18: [mem 0xfd4fe000-0xfd4fffff] Jul 10 01:03:20.662172 kernel: pci 0000:0b:00.0: reg 0x1c: [io 0x5000-0x500f] Jul 10 01:03:20.662221 kernel: pci 0000:0b:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 10 01:03:20.662275 kernel: pci 0000:0b:00.0: supports D1 D2 Jul 10 01:03:20.662324 kernel: pci 0000:0b:00.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 10 01:03:20.662374 kernel: pci 0000:0b:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 10 01:03:20.662422 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 10 01:03:20.662470 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 10 01:03:20.662517 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 10 01:03:20.662565 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 10 01:03:20.662612 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 10 01:03:20.662691 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 10 01:03:20.662755 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 10 01:03:20.662803 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 10 01:03:20.662851 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 10 01:03:20.662898 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 10 01:03:20.662947 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 10 01:03:20.662994 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 10 01:03:20.663044 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 10 01:03:20.663133 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 10 01:03:20.663182 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 10 01:03:20.663229 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 10 01:03:20.663276 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 10 01:03:20.663323 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 10 01:03:20.663370 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 10 01:03:20.663416 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 10 01:03:20.663466 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 10 01:03:20.663513 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 10 01:03:20.663559 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 10 01:03:20.663606 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 10 01:03:20.663654 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 10 01:03:20.663700 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 10 01:03:20.663747 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 10 01:03:20.663794 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 10 01:03:20.663843 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 10 01:03:20.663889 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 10 01:03:20.663938 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 10 01:03:20.663984 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 10 01:03:20.664031 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 10 01:03:20.664077 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 10 01:03:20.664138 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 10 01:03:20.664189 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 10 01:03:20.664236 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 10 01:03:20.664283 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 10 01:03:20.664331 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 10 01:03:20.664377 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 10 01:03:20.664425 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 10 01:03:20.664473 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 10 01:03:20.664521 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 10 01:03:20.664570 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 10 01:03:20.664617 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 10 01:03:20.664684 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 10 01:03:20.664745 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 10 01:03:20.664792 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 10 01:03:20.664839 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 10 01:03:20.664886 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 10 01:03:20.664934 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 10 01:03:20.664983 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 10 01:03:20.665031 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 10 01:03:20.665085 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 10 01:03:20.665140 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 10 01:03:20.665187 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 10 01:03:20.665234 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 10 01:03:20.665282 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 10 01:03:20.665329 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 10 01:03:20.665379 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 10 01:03:20.665426 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 10 01:03:20.665475 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 10 01:03:20.665523 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 10 01:03:20.665570 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 10 01:03:20.665617 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 10 01:03:20.665669 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 10 01:03:20.665717 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 10 01:03:20.665767 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 10 01:03:20.665814 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 10 01:03:20.665861 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 10 01:03:20.665909 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 10 01:03:20.665956 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 10 01:03:20.666003 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 10 01:03:20.666052 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 10 01:03:20.674174 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 10 01:03:20.674256 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 10 01:03:20.674311 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 10 01:03:20.674360 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 10 01:03:20.674481 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 10 01:03:20.674493 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 9 Jul 10 01:03:20.674499 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 0 Jul 10 01:03:20.674510 kernel: ACPI: PCI: Interrupt link LNKB disabled Jul 10 01:03:20.674516 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 10 01:03:20.674524 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 10 Jul 10 01:03:20.674529 kernel: iommu: Default domain type: Translated Jul 10 01:03:20.674535 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 10 01:03:20.674609 kernel: pci 0000:00:0f.0: vgaarb: setting as boot VGA device Jul 10 01:03:20.674700 kernel: pci 0000:00:0f.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 10 01:03:20.674788 kernel: pci 0000:00:0f.0: vgaarb: bridge control possible Jul 10 01:03:20.674804 kernel: vgaarb: loaded Jul 10 01:03:20.674811 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 10 01:03:20.674816 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 10 01:03:20.674825 kernel: PTP clock support registered Jul 10 01:03:20.674830 kernel: PCI: Using ACPI for IRQ routing Jul 10 01:03:20.674838 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 10 01:03:20.674848 kernel: e820: reserve RAM buffer [mem 0x0009ec00-0x0009ffff] Jul 10 01:03:20.674855 kernel: e820: reserve RAM buffer [mem 0x7fee0000-0x7fffffff] Jul 10 01:03:20.674861 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 Jul 10 01:03:20.674866 kernel: hpet0: 16 comparators, 64-bit 14.318180 MHz counter Jul 10 01:03:20.674875 kernel: clocksource: Switched to clocksource tsc-early Jul 10 01:03:20.674883 kernel: VFS: Disk quotas dquot_6.6.0 Jul 10 01:03:20.674890 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 10 01:03:20.674896 kernel: pnp: PnP ACPI init Jul 10 01:03:20.674972 kernel: system 00:00: [io 0x1000-0x103f] has been reserved Jul 10 01:03:20.675041 kernel: system 00:00: [io 0x1040-0x104f] has been reserved Jul 10 01:03:20.675110 kernel: system 00:00: [io 0x0cf0-0x0cf1] has been reserved Jul 10 01:03:20.675164 kernel: system 00:04: [mem 0xfed00000-0xfed003ff] has been reserved Jul 10 01:03:20.675218 kernel: pnp 00:06: [dma 2] Jul 10 01:03:20.675273 kernel: system 00:07: [io 0xfce0-0xfcff] has been reserved Jul 10 01:03:20.675321 kernel: system 00:07: [mem 0xf0000000-0xf7ffffff] has been reserved Jul 10 01:03:20.675368 kernel: system 00:07: [mem 0xfe800000-0xfe9fffff] has been reserved Jul 10 01:03:20.675376 kernel: pnp: PnP ACPI: found 8 devices Jul 10 01:03:20.675382 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 10 01:03:20.675388 kernel: NET: Registered PF_INET protocol family Jul 10 01:03:20.675394 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 10 01:03:20.675400 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 10 01:03:20.675407 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 10 01:03:20.675413 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 10 01:03:20.675418 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 10 01:03:20.675424 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 10 01:03:20.675430 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 10 01:03:20.675435 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 10 01:03:20.675441 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 10 01:03:20.675446 kernel: NET: Registered PF_XDP protocol family Jul 10 01:03:20.675499 kernel: pci 0000:00:15.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 03] add_size 200000 add_align 100000 Jul 10 01:03:20.675555 kernel: pci 0000:00:15.3: bridge window [io 0x1000-0x0fff] to [bus 06] add_size 1000 Jul 10 01:03:20.675608 kernel: pci 0000:00:15.4: bridge window [io 0x1000-0x0fff] to [bus 07] add_size 1000 Jul 10 01:03:20.675661 kernel: pci 0000:00:15.5: bridge window [io 0x1000-0x0fff] to [bus 08] add_size 1000 Jul 10 01:03:20.675714 kernel: pci 0000:00:15.6: bridge window [io 0x1000-0x0fff] to [bus 09] add_size 1000 Jul 10 01:03:20.675766 kernel: pci 0000:00:15.7: bridge window [io 0x1000-0x0fff] to [bus 0a] add_size 1000 Jul 10 01:03:20.675820 kernel: pci 0000:00:16.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0b] add_size 200000 add_align 100000 Jul 10 01:03:20.675872 kernel: pci 0000:00:16.3: bridge window [io 0x1000-0x0fff] to [bus 0e] add_size 1000 Jul 10 01:03:20.675924 kernel: pci 0000:00:16.4: bridge window [io 0x1000-0x0fff] to [bus 0f] add_size 1000 Jul 10 01:03:20.675975 kernel: pci 0000:00:16.5: bridge window [io 0x1000-0x0fff] to [bus 10] add_size 1000 Jul 10 01:03:20.676027 kernel: pci 0000:00:16.6: bridge window [io 0x1000-0x0fff] to [bus 11] add_size 1000 Jul 10 01:03:20.676084 kernel: pci 0000:00:16.7: bridge window [io 0x1000-0x0fff] to [bus 12] add_size 1000 Jul 10 01:03:20.676232 kernel: pci 0000:00:17.3: bridge window [io 0x1000-0x0fff] to [bus 16] add_size 1000 Jul 10 01:03:20.676286 kernel: pci 0000:00:17.4: bridge window [io 0x1000-0x0fff] to [bus 17] add_size 1000 Jul 10 01:03:20.676339 kernel: pci 0000:00:17.5: bridge window [io 0x1000-0x0fff] to [bus 18] add_size 1000 Jul 10 01:03:20.676391 kernel: pci 0000:00:17.6: bridge window [io 0x1000-0x0fff] to [bus 19] add_size 1000 Jul 10 01:03:20.676444 kernel: pci 0000:00:17.7: bridge window [io 0x1000-0x0fff] to [bus 1a] add_size 1000 Jul 10 01:03:20.676495 kernel: pci 0000:00:18.2: bridge window [io 0x1000-0x0fff] to [bus 1d] add_size 1000 Jul 10 01:03:20.676549 kernel: pci 0000:00:18.3: bridge window [io 0x1000-0x0fff] to [bus 1e] add_size 1000 Jul 10 01:03:20.676601 kernel: pci 0000:00:18.4: bridge window [io 0x1000-0x0fff] to [bus 1f] add_size 1000 Jul 10 01:03:20.676657 kernel: pci 0000:00:18.5: bridge window [io 0x1000-0x0fff] to [bus 20] add_size 1000 Jul 10 01:03:20.676710 kernel: pci 0000:00:18.6: bridge window [io 0x1000-0x0fff] to [bus 21] add_size 1000 Jul 10 01:03:20.676762 kernel: pci 0000:00:18.7: bridge window [io 0x1000-0x0fff] to [bus 22] add_size 1000 Jul 10 01:03:20.676814 kernel: pci 0000:00:15.0: BAR 15: assigned [mem 0xc0000000-0xc01fffff 64bit pref] Jul 10 01:03:20.676868 kernel: pci 0000:00:16.0: BAR 15: assigned [mem 0xc0200000-0xc03fffff 64bit pref] Jul 10 01:03:20.676919 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.676970 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.677021 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.677073 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.677170 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.677224 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.677275 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.677330 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.677382 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.677434 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.677485 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.677536 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.677587 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.677638 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.677689 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.677743 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.677809 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.677863 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.677915 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.677966 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.683156 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.683214 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.683265 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.683317 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.683366 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.683413 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.683462 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.683509 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.683557 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.683604 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.683652 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.683701 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.683749 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.683796 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.683843 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.683890 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.683937 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.683985 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.684031 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.684709 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.684775 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.684828 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.684878 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.685585 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.685645 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.685698 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.690690 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.690749 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.690804 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.691067 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.691137 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.691188 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.691247 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.691297 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.691345 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.691393 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.691439 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.691490 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.691537 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.691585 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.691632 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.691681 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.691728 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.691776 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.691823 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.691870 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.691919 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.691969 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.692017 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.692064 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.697466 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.697524 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.697574 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.697624 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.697673 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.697722 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.697774 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.697822 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.697871 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.697918 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.697967 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.698014 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.698062 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 10 01:03:20.698154 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:03:20.698206 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 10 01:03:20.698254 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] Jul 10 01:03:20.698304 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 10 01:03:20.698351 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 10 01:03:20.698398 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 10 01:03:20.698618 kernel: pci 0000:03:00.0: BAR 6: assigned [mem 0xfd500000-0xfd50ffff pref] Jul 10 01:03:20.698669 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 10 01:03:20.698718 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 10 01:03:20.698765 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 10 01:03:20.698812 kernel: pci 0000:00:15.0: bridge window [mem 0xc0000000-0xc01fffff 64bit pref] Jul 10 01:03:20.698863 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 10 01:03:20.698942 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 10 01:03:20.698990 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 10 01:03:20.699036 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 10 01:03:20.699100 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 10 01:03:20.699153 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 10 01:03:20.699491 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 10 01:03:20.699546 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 10 01:03:20.699595 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 10 01:03:20.699800 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 10 01:03:20.699856 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 10 01:03:20.699906 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 10 01:03:20.699953 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 10 01:03:20.700002 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 10 01:03:20.700301 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 10 01:03:20.700359 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 10 01:03:20.700409 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 10 01:03:20.700463 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 10 01:03:20.700511 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 10 01:03:20.700558 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 10 01:03:20.700606 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 10 01:03:20.700652 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 10 01:03:20.700699 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 10 01:03:20.700750 kernel: pci 0000:0b:00.0: BAR 6: assigned [mem 0xfd400000-0xfd40ffff pref] Jul 10 01:03:20.700800 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 10 01:03:20.700848 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 10 01:03:20.700895 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 10 01:03:20.700942 kernel: pci 0000:00:16.0: bridge window [mem 0xc0200000-0xc03fffff 64bit pref] Jul 10 01:03:20.700991 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 10 01:03:20.701037 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 10 01:03:20.701307 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 10 01:03:20.701366 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 10 01:03:20.701700 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 10 01:03:20.701964 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 10 01:03:20.702026 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 10 01:03:20.702108 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 10 01:03:20.702167 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 10 01:03:20.702215 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 10 01:03:20.702263 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 10 01:03:20.702310 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 10 01:03:20.702357 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 10 01:03:20.702404 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 10 01:03:20.702451 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 10 01:03:20.702501 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 10 01:03:20.702547 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 10 01:03:20.702595 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 10 01:03:20.702647 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 10 01:03:20.702737 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 10 01:03:20.702784 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 10 01:03:20.702832 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 10 01:03:20.702878 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 10 01:03:20.702927 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 10 01:03:20.702974 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 10 01:03:20.703023 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 10 01:03:20.703070 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 10 01:03:20.703337 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 10 01:03:20.703390 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 10 01:03:20.703440 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 10 01:03:20.703493 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 10 01:03:20.703544 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 10 01:03:20.703592 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 10 01:03:20.703639 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 10 01:03:20.703690 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 10 01:03:20.703738 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 10 01:03:20.703786 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 10 01:03:20.703834 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 10 01:03:20.703883 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 10 01:03:20.703930 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 10 01:03:20.703977 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 10 01:03:20.704024 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 10 01:03:20.704072 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 10 01:03:20.704405 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 10 01:03:20.704459 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 10 01:03:20.704509 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 10 01:03:20.704579 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 10 01:03:20.704876 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 10 01:03:20.704928 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 10 01:03:20.704977 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 10 01:03:20.705047 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 10 01:03:20.705338 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 10 01:03:20.705603 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 10 01:03:20.705664 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 10 01:03:20.705715 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 10 01:03:20.705763 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 10 01:03:20.705811 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 10 01:03:20.705858 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 10 01:03:20.705905 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 10 01:03:20.705952 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 10 01:03:20.705999 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 10 01:03:20.706046 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 10 01:03:20.706113 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 10 01:03:20.706166 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 10 01:03:20.706215 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 10 01:03:20.706262 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 10 01:03:20.706310 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 10 01:03:20.706357 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 10 01:03:20.706406 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 10 01:03:20.706454 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 10 01:03:20.706502 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 10 01:03:20.706550 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 10 01:03:20.706600 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 10 01:03:20.706649 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 10 01:03:20.706696 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 10 01:03:20.706744 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 10 01:03:20.707014 kernel: pci_bus 0000:00: resource 4 [mem 0x000a0000-0x000bffff window] Jul 10 01:03:20.707072 kernel: pci_bus 0000:00: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 10 01:03:20.707140 kernel: pci_bus 0000:00: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 10 01:03:20.707183 kernel: pci_bus 0000:00: resource 7 [io 0x0000-0x0cf7 window] Jul 10 01:03:20.707248 kernel: pci_bus 0000:00: resource 8 [io 0x0d00-0xfeff window] Jul 10 01:03:20.707501 kernel: pci_bus 0000:02: resource 0 [io 0x2000-0x3fff] Jul 10 01:03:20.707549 kernel: pci_bus 0000:02: resource 1 [mem 0xfd600000-0xfdffffff] Jul 10 01:03:20.707593 kernel: pci_bus 0000:02: resource 2 [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 10 01:03:20.707658 kernel: pci_bus 0000:02: resource 4 [mem 0x000a0000-0x000bffff window] Jul 10 01:03:20.707933 kernel: pci_bus 0000:02: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 10 01:03:20.708001 kernel: pci_bus 0000:02: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 10 01:03:20.708062 kernel: pci_bus 0000:02: resource 7 [io 0x0000-0x0cf7 window] Jul 10 01:03:20.708144 kernel: pci_bus 0000:02: resource 8 [io 0x0d00-0xfeff window] Jul 10 01:03:20.708591 kernel: pci_bus 0000:03: resource 0 [io 0x4000-0x4fff] Jul 10 01:03:20.708645 kernel: pci_bus 0000:03: resource 1 [mem 0xfd500000-0xfd5fffff] Jul 10 01:03:20.708693 kernel: pci_bus 0000:03: resource 2 [mem 0xc0000000-0xc01fffff 64bit pref] Jul 10 01:03:20.708948 kernel: pci_bus 0000:04: resource 0 [io 0x8000-0x8fff] Jul 10 01:03:20.708996 kernel: pci_bus 0000:04: resource 1 [mem 0xfd100000-0xfd1fffff] Jul 10 01:03:20.709041 kernel: pci_bus 0000:04: resource 2 [mem 0xe7800000-0xe78fffff 64bit pref] Jul 10 01:03:20.709127 kernel: pci_bus 0000:05: resource 0 [io 0xc000-0xcfff] Jul 10 01:03:20.709179 kernel: pci_bus 0000:05: resource 1 [mem 0xfcd00000-0xfcdfffff] Jul 10 01:03:20.709223 kernel: pci_bus 0000:05: resource 2 [mem 0xe7400000-0xe74fffff 64bit pref] Jul 10 01:03:20.709271 kernel: pci_bus 0000:06: resource 1 [mem 0xfc900000-0xfc9fffff] Jul 10 01:03:20.709364 kernel: pci_bus 0000:06: resource 2 [mem 0xe7000000-0xe70fffff 64bit pref] Jul 10 01:03:20.709672 kernel: pci_bus 0000:07: resource 1 [mem 0xfc500000-0xfc5fffff] Jul 10 01:03:20.709933 kernel: pci_bus 0000:07: resource 2 [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 10 01:03:20.709988 kernel: pci_bus 0000:08: resource 1 [mem 0xfc100000-0xfc1fffff] Jul 10 01:03:20.710035 kernel: pci_bus 0000:08: resource 2 [mem 0xe6800000-0xe68fffff 64bit pref] Jul 10 01:03:20.710094 kernel: pci_bus 0000:09: resource 1 [mem 0xfbd00000-0xfbdfffff] Jul 10 01:03:20.710143 kernel: pci_bus 0000:09: resource 2 [mem 0xe6400000-0xe64fffff 64bit pref] Jul 10 01:03:20.710192 kernel: pci_bus 0000:0a: resource 1 [mem 0xfb900000-0xfb9fffff] Jul 10 01:03:20.710240 kernel: pci_bus 0000:0a: resource 2 [mem 0xe6000000-0xe60fffff 64bit pref] Jul 10 01:03:20.710288 kernel: pci_bus 0000:0b: resource 0 [io 0x5000-0x5fff] Jul 10 01:03:20.710333 kernel: pci_bus 0000:0b: resource 1 [mem 0xfd400000-0xfd4fffff] Jul 10 01:03:20.710377 kernel: pci_bus 0000:0b: resource 2 [mem 0xc0200000-0xc03fffff 64bit pref] Jul 10 01:03:20.710425 kernel: pci_bus 0000:0c: resource 0 [io 0x9000-0x9fff] Jul 10 01:03:20.710471 kernel: pci_bus 0000:0c: resource 1 [mem 0xfd000000-0xfd0fffff] Jul 10 01:03:20.710520 kernel: pci_bus 0000:0c: resource 2 [mem 0xe7700000-0xe77fffff 64bit pref] Jul 10 01:03:20.710579 kernel: pci_bus 0000:0d: resource 0 [io 0xd000-0xdfff] Jul 10 01:03:20.710627 kernel: pci_bus 0000:0d: resource 1 [mem 0xfcc00000-0xfccfffff] Jul 10 01:03:20.710671 kernel: pci_bus 0000:0d: resource 2 [mem 0xe7300000-0xe73fffff 64bit pref] Jul 10 01:03:20.710719 kernel: pci_bus 0000:0e: resource 1 [mem 0xfc800000-0xfc8fffff] Jul 10 01:03:20.710765 kernel: pci_bus 0000:0e: resource 2 [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 10 01:03:20.710813 kernel: pci_bus 0000:0f: resource 1 [mem 0xfc400000-0xfc4fffff] Jul 10 01:03:20.710861 kernel: pci_bus 0000:0f: resource 2 [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 10 01:03:20.710910 kernel: pci_bus 0000:10: resource 1 [mem 0xfc000000-0xfc0fffff] Jul 10 01:03:20.710955 kernel: pci_bus 0000:10: resource 2 [mem 0xe6700000-0xe67fffff 64bit pref] Jul 10 01:03:20.711021 kernel: pci_bus 0000:11: resource 1 [mem 0xfbc00000-0xfbcfffff] Jul 10 01:03:20.711089 kernel: pci_bus 0000:11: resource 2 [mem 0xe6300000-0xe63fffff 64bit pref] Jul 10 01:03:20.711138 kernel: pci_bus 0000:12: resource 1 [mem 0xfb800000-0xfb8fffff] Jul 10 01:03:20.711199 kernel: pci_bus 0000:12: resource 2 [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 10 01:03:20.711253 kernel: pci_bus 0000:13: resource 0 [io 0x6000-0x6fff] Jul 10 01:03:20.711298 kernel: pci_bus 0000:13: resource 1 [mem 0xfd300000-0xfd3fffff] Jul 10 01:03:20.711365 kernel: pci_bus 0000:13: resource 2 [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 10 01:03:20.711668 kernel: pci_bus 0000:14: resource 0 [io 0xa000-0xafff] Jul 10 01:03:20.711720 kernel: pci_bus 0000:14: resource 1 [mem 0xfcf00000-0xfcffffff] Jul 10 01:03:20.711766 kernel: pci_bus 0000:14: resource 2 [mem 0xe7600000-0xe76fffff 64bit pref] Jul 10 01:03:20.711818 kernel: pci_bus 0000:15: resource 0 [io 0xe000-0xefff] Jul 10 01:03:20.711864 kernel: pci_bus 0000:15: resource 1 [mem 0xfcb00000-0xfcbfffff] Jul 10 01:03:20.711908 kernel: pci_bus 0000:15: resource 2 [mem 0xe7200000-0xe72fffff 64bit pref] Jul 10 01:03:20.711958 kernel: pci_bus 0000:16: resource 1 [mem 0xfc700000-0xfc7fffff] Jul 10 01:03:20.712003 kernel: pci_bus 0000:16: resource 2 [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 10 01:03:20.712288 kernel: pci_bus 0000:17: resource 1 [mem 0xfc300000-0xfc3fffff] Jul 10 01:03:20.712344 kernel: pci_bus 0000:17: resource 2 [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 10 01:03:20.712395 kernel: pci_bus 0000:18: resource 1 [mem 0xfbf00000-0xfbffffff] Jul 10 01:03:20.712461 kernel: pci_bus 0000:18: resource 2 [mem 0xe6600000-0xe66fffff 64bit pref] Jul 10 01:03:20.712759 kernel: pci_bus 0000:19: resource 1 [mem 0xfbb00000-0xfbbfffff] Jul 10 01:03:20.712810 kernel: pci_bus 0000:19: resource 2 [mem 0xe6200000-0xe62fffff 64bit pref] Jul 10 01:03:20.712863 kernel: pci_bus 0000:1a: resource 1 [mem 0xfb700000-0xfb7fffff] Jul 10 01:03:20.712911 kernel: pci_bus 0000:1a: resource 2 [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 10 01:03:20.712960 kernel: pci_bus 0000:1b: resource 0 [io 0x7000-0x7fff] Jul 10 01:03:20.713004 kernel: pci_bus 0000:1b: resource 1 [mem 0xfd200000-0xfd2fffff] Jul 10 01:03:20.713048 kernel: pci_bus 0000:1b: resource 2 [mem 0xe7900000-0xe79fffff 64bit pref] Jul 10 01:03:20.713102 kernel: pci_bus 0000:1c: resource 0 [io 0xb000-0xbfff] Jul 10 01:03:20.713151 kernel: pci_bus 0000:1c: resource 1 [mem 0xfce00000-0xfcefffff] Jul 10 01:03:20.713194 kernel: pci_bus 0000:1c: resource 2 [mem 0xe7500000-0xe75fffff 64bit pref] Jul 10 01:03:20.713245 kernel: pci_bus 0000:1d: resource 1 [mem 0xfca00000-0xfcafffff] Jul 10 01:03:20.713290 kernel: pci_bus 0000:1d: resource 2 [mem 0xe7100000-0xe71fffff 64bit pref] Jul 10 01:03:20.713340 kernel: pci_bus 0000:1e: resource 1 [mem 0xfc600000-0xfc6fffff] Jul 10 01:03:20.713384 kernel: pci_bus 0000:1e: resource 2 [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 10 01:03:20.713432 kernel: pci_bus 0000:1f: resource 1 [mem 0xfc200000-0xfc2fffff] Jul 10 01:03:20.713476 kernel: pci_bus 0000:1f: resource 2 [mem 0xe6900000-0xe69fffff 64bit pref] Jul 10 01:03:20.713537 kernel: pci_bus 0000:20: resource 1 [mem 0xfbe00000-0xfbefffff] Jul 10 01:03:20.713583 kernel: pci_bus 0000:20: resource 2 [mem 0xe6500000-0xe65fffff 64bit pref] Jul 10 01:03:20.713849 kernel: pci_bus 0000:21: resource 1 [mem 0xfba00000-0xfbafffff] Jul 10 01:03:20.713901 kernel: pci_bus 0000:21: resource 2 [mem 0xe6100000-0xe61fffff 64bit pref] Jul 10 01:03:20.713952 kernel: pci_bus 0000:22: resource 1 [mem 0xfb600000-0xfb6fffff] Jul 10 01:03:20.714020 kernel: pci_bus 0000:22: resource 2 [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 10 01:03:20.714321 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 10 01:03:20.714333 kernel: PCI: CLS 32 bytes, default 64 Jul 10 01:03:20.714340 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jul 10 01:03:20.714542 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 10 01:03:20.714550 kernel: clocksource: Switched to clocksource tsc Jul 10 01:03:20.714556 kernel: Initialise system trusted keyrings Jul 10 01:03:20.714562 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 10 01:03:20.714568 kernel: Key type asymmetric registered Jul 10 01:03:20.714576 kernel: Asymmetric key parser 'x509' registered Jul 10 01:03:20.714582 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 10 01:03:20.714588 kernel: io scheduler mq-deadline registered Jul 10 01:03:20.714594 kernel: io scheduler kyber registered Jul 10 01:03:20.714601 kernel: io scheduler bfq registered Jul 10 01:03:20.714660 kernel: pcieport 0000:00:15.0: PME: Signaling with IRQ 24 Jul 10 01:03:20.714733 kernel: pcieport 0000:00:15.0: pciehp: Slot #160 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.715002 kernel: pcieport 0000:00:15.1: PME: Signaling with IRQ 25 Jul 10 01:03:20.715058 kernel: pcieport 0000:00:15.1: pciehp: Slot #161 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.715126 kernel: pcieport 0000:00:15.2: PME: Signaling with IRQ 26 Jul 10 01:03:20.715452 kernel: pcieport 0000:00:15.2: pciehp: Slot #162 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.715508 kernel: pcieport 0000:00:15.3: PME: Signaling with IRQ 27 Jul 10 01:03:20.715561 kernel: pcieport 0000:00:15.3: pciehp: Slot #163 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.715895 kernel: pcieport 0000:00:15.4: PME: Signaling with IRQ 28 Jul 10 01:03:20.715951 kernel: pcieport 0000:00:15.4: pciehp: Slot #164 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.716005 kernel: pcieport 0000:00:15.5: PME: Signaling with IRQ 29 Jul 10 01:03:20.716055 kernel: pcieport 0000:00:15.5: pciehp: Slot #165 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.716146 kernel: pcieport 0000:00:15.6: PME: Signaling with IRQ 30 Jul 10 01:03:20.716197 kernel: pcieport 0000:00:15.6: pciehp: Slot #166 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.716247 kernel: pcieport 0000:00:15.7: PME: Signaling with IRQ 31 Jul 10 01:03:20.716298 kernel: pcieport 0000:00:15.7: pciehp: Slot #167 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.716346 kernel: pcieport 0000:00:16.0: PME: Signaling with IRQ 32 Jul 10 01:03:20.716394 kernel: pcieport 0000:00:16.0: pciehp: Slot #192 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.716443 kernel: pcieport 0000:00:16.1: PME: Signaling with IRQ 33 Jul 10 01:03:20.716490 kernel: pcieport 0000:00:16.1: pciehp: Slot #193 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.716538 kernel: pcieport 0000:00:16.2: PME: Signaling with IRQ 34 Jul 10 01:03:20.716585 kernel: pcieport 0000:00:16.2: pciehp: Slot #194 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.716636 kernel: pcieport 0000:00:16.3: PME: Signaling with IRQ 35 Jul 10 01:03:20.716684 kernel: pcieport 0000:00:16.3: pciehp: Slot #195 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.716949 kernel: pcieport 0000:00:16.4: PME: Signaling with IRQ 36 Jul 10 01:03:20.717003 kernel: pcieport 0000:00:16.4: pciehp: Slot #196 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.717053 kernel: pcieport 0000:00:16.5: PME: Signaling with IRQ 37 Jul 10 01:03:20.717130 kernel: pcieport 0000:00:16.5: pciehp: Slot #197 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.717181 kernel: pcieport 0000:00:16.6: PME: Signaling with IRQ 38 Jul 10 01:03:20.717231 kernel: pcieport 0000:00:16.6: pciehp: Slot #198 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.717280 kernel: pcieport 0000:00:16.7: PME: Signaling with IRQ 39 Jul 10 01:03:20.717329 kernel: pcieport 0000:00:16.7: pciehp: Slot #199 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.717400 kernel: pcieport 0000:00:17.0: PME: Signaling with IRQ 40 Jul 10 01:03:20.717517 kernel: pcieport 0000:00:17.0: pciehp: Slot #224 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.717592 kernel: pcieport 0000:00:17.1: PME: Signaling with IRQ 41 Jul 10 01:03:20.717866 kernel: pcieport 0000:00:17.1: pciehp: Slot #225 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.717925 kernel: pcieport 0000:00:17.2: PME: Signaling with IRQ 42 Jul 10 01:03:20.717982 kernel: pcieport 0000:00:17.2: pciehp: Slot #226 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.718041 kernel: pcieport 0000:00:17.3: PME: Signaling with IRQ 43 Jul 10 01:03:20.718351 kernel: pcieport 0000:00:17.3: pciehp: Slot #227 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.720194 kernel: pcieport 0000:00:17.4: PME: Signaling with IRQ 44 Jul 10 01:03:20.720258 kernel: pcieport 0000:00:17.4: pciehp: Slot #228 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.720317 kernel: pcieport 0000:00:17.5: PME: Signaling with IRQ 45 Jul 10 01:03:20.720368 kernel: pcieport 0000:00:17.5: pciehp: Slot #229 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.720418 kernel: pcieport 0000:00:17.6: PME: Signaling with IRQ 46 Jul 10 01:03:20.720470 kernel: pcieport 0000:00:17.6: pciehp: Slot #230 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.720520 kernel: pcieport 0000:00:17.7: PME: Signaling with IRQ 47 Jul 10 01:03:20.720568 kernel: pcieport 0000:00:17.7: pciehp: Slot #231 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.720616 kernel: pcieport 0000:00:18.0: PME: Signaling with IRQ 48 Jul 10 01:03:20.720663 kernel: pcieport 0000:00:18.0: pciehp: Slot #256 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.720712 kernel: pcieport 0000:00:18.1: PME: Signaling with IRQ 49 Jul 10 01:03:20.720762 kernel: pcieport 0000:00:18.1: pciehp: Slot #257 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.720810 kernel: pcieport 0000:00:18.2: PME: Signaling with IRQ 50 Jul 10 01:03:20.720857 kernel: pcieport 0000:00:18.2: pciehp: Slot #258 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.720905 kernel: pcieport 0000:00:18.3: PME: Signaling with IRQ 51 Jul 10 01:03:20.720953 kernel: pcieport 0000:00:18.3: pciehp: Slot #259 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.721002 kernel: pcieport 0000:00:18.4: PME: Signaling with IRQ 52 Jul 10 01:03:20.721052 kernel: pcieport 0000:00:18.4: pciehp: Slot #260 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.721107 kernel: pcieport 0000:00:18.5: PME: Signaling with IRQ 53 Jul 10 01:03:20.721156 kernel: pcieport 0000:00:18.5: pciehp: Slot #261 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.721204 kernel: pcieport 0000:00:18.6: PME: Signaling with IRQ 54 Jul 10 01:03:20.721252 kernel: pcieport 0000:00:18.6: pciehp: Slot #262 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.721303 kernel: pcieport 0000:00:18.7: PME: Signaling with IRQ 55 Jul 10 01:03:20.721351 kernel: pcieport 0000:00:18.7: pciehp: Slot #263 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:03:20.721359 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 10 01:03:20.721366 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 10 01:03:20.721372 kernel: 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 10 01:03:20.721378 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBC,PNP0f13:MOUS] at 0x60,0x64 irq 1,12 Jul 10 01:03:20.721384 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 10 01:03:20.721392 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 10 01:03:20.721443 kernel: rtc_cmos 00:01: registered as rtc0 Jul 10 01:03:20.721489 kernel: rtc_cmos 00:01: setting system clock to 2025-07-10T01:03:20 UTC (1752109400) Jul 10 01:03:20.721532 kernel: rtc_cmos 00:01: alarms up to one month, y3k, 114 bytes nvram Jul 10 01:03:20.721541 kernel: intel_pstate: CPU model not supported Jul 10 01:03:20.721547 kernel: NET: Registered PF_INET6 protocol family Jul 10 01:03:20.721553 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 10 01:03:20.721559 kernel: Segment Routing with IPv6 Jul 10 01:03:20.721567 kernel: In-situ OAM (IOAM) with IPv6 Jul 10 01:03:20.721573 kernel: NET: Registered PF_PACKET protocol family Jul 10 01:03:20.721579 kernel: Key type dns_resolver registered Jul 10 01:03:20.721585 kernel: IPI shorthand broadcast: enabled Jul 10 01:03:20.721591 kernel: sched_clock: Marking stable (842294589, 217233747)->(1116352793, -56824457) Jul 10 01:03:20.721597 kernel: registered taskstats version 1 Jul 10 01:03:20.721603 kernel: Loading compiled-in X.509 certificates Jul 10 01:03:20.721609 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: 6ebecdd7757c0df63fc51731f0b99957f4e4af16' Jul 10 01:03:20.721615 kernel: Key type .fscrypt registered Jul 10 01:03:20.721622 kernel: Key type fscrypt-provisioning registered Jul 10 01:03:20.721627 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 10 01:03:20.721634 kernel: ima: Allocated hash algorithm: sha1 Jul 10 01:03:20.721640 kernel: ima: No architecture policies found Jul 10 01:03:20.721650 kernel: clk: Disabling unused clocks Jul 10 01:03:20.721655 kernel: Freeing unused kernel image (initmem) memory: 47472K Jul 10 01:03:20.721662 kernel: Write protecting the kernel read-only data: 28672k Jul 10 01:03:20.721668 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 10 01:03:20.721673 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K Jul 10 01:03:20.721681 kernel: Run /init as init process Jul 10 01:03:20.721687 kernel: with arguments: Jul 10 01:03:20.721693 kernel: /init Jul 10 01:03:20.721699 kernel: with environment: Jul 10 01:03:20.721704 kernel: HOME=/ Jul 10 01:03:20.721710 kernel: TERM=linux Jul 10 01:03:20.721716 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 10 01:03:20.721723 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 01:03:20.721732 systemd[1]: Detected virtualization vmware. Jul 10 01:03:20.721739 systemd[1]: Detected architecture x86-64. Jul 10 01:03:20.721745 systemd[1]: Running in initrd. Jul 10 01:03:20.721751 systemd[1]: No hostname configured, using default hostname. Jul 10 01:03:20.721757 systemd[1]: Hostname set to . Jul 10 01:03:20.721763 systemd[1]: Initializing machine ID from random generator. Jul 10 01:03:20.721769 systemd[1]: Queued start job for default target initrd.target. Jul 10 01:03:20.721775 systemd[1]: Started systemd-ask-password-console.path. Jul 10 01:03:20.721783 systemd[1]: Reached target cryptsetup.target. Jul 10 01:03:20.721788 systemd[1]: Reached target paths.target. Jul 10 01:03:20.721794 systemd[1]: Reached target slices.target. Jul 10 01:03:20.721800 systemd[1]: Reached target swap.target. Jul 10 01:03:20.721806 systemd[1]: Reached target timers.target. Jul 10 01:03:20.721812 systemd[1]: Listening on iscsid.socket. Jul 10 01:03:20.721818 systemd[1]: Listening on iscsiuio.socket. Jul 10 01:03:20.721824 systemd[1]: Listening on systemd-journald-audit.socket. Jul 10 01:03:20.721832 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 10 01:03:20.721838 systemd[1]: Listening on systemd-journald.socket. Jul 10 01:03:20.721844 systemd[1]: Listening on systemd-networkd.socket. Jul 10 01:03:20.721851 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 01:03:20.721857 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 01:03:20.721863 systemd[1]: Reached target sockets.target. Jul 10 01:03:20.721869 systemd[1]: Starting kmod-static-nodes.service... Jul 10 01:03:20.721875 systemd[1]: Finished network-cleanup.service. Jul 10 01:03:20.721882 systemd[1]: Starting systemd-fsck-usr.service... Jul 10 01:03:20.721888 systemd[1]: Starting systemd-journald.service... Jul 10 01:03:20.721894 systemd[1]: Starting systemd-modules-load.service... Jul 10 01:03:20.721900 systemd[1]: Starting systemd-resolved.service... Jul 10 01:03:20.721906 systemd[1]: Starting systemd-vconsole-setup.service... Jul 10 01:03:20.721913 systemd[1]: Finished kmod-static-nodes.service. Jul 10 01:03:20.721919 systemd[1]: Finished systemd-fsck-usr.service. Jul 10 01:03:20.721925 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 01:03:20.721931 systemd[1]: Finished systemd-vconsole-setup.service. Jul 10 01:03:20.721939 kernel: audit: type=1130 audit(1752109400.654:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.721945 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 01:03:20.721951 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 10 01:03:20.721958 kernel: audit: type=1130 audit(1752109400.669:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.721964 systemd[1]: Starting dracut-cmdline-ask.service... Jul 10 01:03:20.721969 kernel: Bridge firewalling registered Jul 10 01:03:20.721975 systemd[1]: Finished dracut-cmdline-ask.service. Jul 10 01:03:20.721981 kernel: audit: type=1130 audit(1752109400.685:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.721988 systemd[1]: Starting dracut-cmdline.service... Jul 10 01:03:20.721995 systemd[1]: Started systemd-resolved.service. Jul 10 01:03:20.722001 kernel: audit: type=1130 audit(1752109400.692:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.722007 systemd[1]: Reached target nss-lookup.target. Jul 10 01:03:20.722013 kernel: SCSI subsystem initialized Jul 10 01:03:20.722020 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 10 01:03:20.722026 kernel: device-mapper: uevent: version 1.0.3 Jul 10 01:03:20.722032 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 10 01:03:20.722038 systemd[1]: Finished systemd-modules-load.service. Jul 10 01:03:20.722045 systemd[1]: Starting systemd-sysctl.service... Jul 10 01:03:20.722051 kernel: audit: type=1130 audit(1752109400.718:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.722060 systemd-journald[216]: Journal started Jul 10 01:03:20.722099 systemd-journald[216]: Runtime Journal (/run/log/journal/03b02d8f834149b5b95a7dab1305b065) is 4.8M, max 38.8M, 34.0M free. Jul 10 01:03:20.654000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.718000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.645104 systemd-modules-load[217]: Inserted module 'overlay' Jul 10 01:03:20.678513 systemd-modules-load[217]: Inserted module 'br_netfilter' Jul 10 01:03:20.682360 systemd-resolved[218]: Positive Trust Anchors: Jul 10 01:03:20.682364 systemd-resolved[218]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 01:03:20.682383 systemd-resolved[218]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 01:03:20.692368 systemd-resolved[218]: Defaulting to hostname 'linux'. Jul 10 01:03:20.718174 systemd-modules-load[217]: Inserted module 'dm_multipath' Jul 10 01:03:20.726928 dracut-cmdline[233]: dracut-dracut-053 Jul 10 01:03:20.726928 dracut-cmdline[233]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Jul 10 01:03:20.726928 dracut-cmdline[233]: BEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 01:03:20.733432 systemd[1]: Started systemd-journald.service. Jul 10 01:03:20.733445 kernel: audit: type=1130 audit(1752109400.726:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.733454 kernel: audit: type=1130 audit(1752109400.729:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.726000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.727999 systemd[1]: Finished systemd-sysctl.service. Jul 10 01:03:20.753092 kernel: Loading iSCSI transport class v2.0-870. Jul 10 01:03:20.765093 kernel: iscsi: registered transport (tcp) Jul 10 01:03:20.781092 kernel: iscsi: registered transport (qla4xxx) Jul 10 01:03:20.781107 kernel: QLogic iSCSI HBA Driver Jul 10 01:03:20.796872 systemd[1]: Finished dracut-cmdline.service. Jul 10 01:03:20.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.797470 systemd[1]: Starting dracut-pre-udev.service... Jul 10 01:03:20.800096 kernel: audit: type=1130 audit(1752109400.795:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:20.835125 kernel: raid6: avx2x4 gen() 49313 MB/s Jul 10 01:03:20.851091 kernel: raid6: avx2x4 xor() 22256 MB/s Jul 10 01:03:20.868118 kernel: raid6: avx2x2 gen() 45276 MB/s Jul 10 01:03:20.885122 kernel: raid6: avx2x2 xor() 32638 MB/s Jul 10 01:03:20.902122 kernel: raid6: avx2x1 gen() 47021 MB/s Jul 10 01:03:20.919127 kernel: raid6: avx2x1 xor() 28737 MB/s Jul 10 01:03:20.936089 kernel: raid6: sse2x4 gen() 21959 MB/s Jul 10 01:03:20.953090 kernel: raid6: sse2x4 xor() 11711 MB/s Jul 10 01:03:20.970124 kernel: raid6: sse2x2 gen() 21862 MB/s Jul 10 01:03:20.987124 kernel: raid6: sse2x2 xor() 13721 MB/s Jul 10 01:03:21.004124 kernel: raid6: sse2x1 gen() 18896 MB/s Jul 10 01:03:21.021236 kernel: raid6: sse2x1 xor() 9221 MB/s Jul 10 01:03:21.021253 kernel: raid6: using algorithm avx2x4 gen() 49313 MB/s Jul 10 01:03:21.021262 kernel: raid6: .... xor() 22256 MB/s, rmw enabled Jul 10 01:03:21.022345 kernel: raid6: using avx2x2 recovery algorithm Jul 10 01:03:21.031093 kernel: xor: automatically using best checksumming function avx Jul 10 01:03:21.090454 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 10 01:03:21.093000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:21.094226 systemd[1]: Finished dracut-pre-udev.service. Jul 10 01:03:21.093000 audit: BPF prog-id=7 op=LOAD Jul 10 01:03:21.093000 audit: BPF prog-id=8 op=LOAD Jul 10 01:03:21.094861 systemd[1]: Starting systemd-udevd.service... Jul 10 01:03:21.098098 kernel: audit: type=1130 audit(1752109401.093:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:21.104837 systemd-udevd[416]: Using default interface naming scheme 'v252'. Jul 10 01:03:21.107406 systemd[1]: Started systemd-udevd.service. Jul 10 01:03:21.107861 systemd[1]: Starting dracut-pre-trigger.service... Jul 10 01:03:21.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:21.115117 dracut-pre-trigger[421]: rd.md=0: removing MD RAID activation Jul 10 01:03:21.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:21.130364 systemd[1]: Finished dracut-pre-trigger.service. Jul 10 01:03:21.130874 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 01:03:21.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:21.193713 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 01:03:21.254093 kernel: VMware vmxnet3 virtual NIC driver - version 1.6.0.0-k-NAPI Jul 10 01:03:21.257187 kernel: vmxnet3 0000:0b:00.0: # of Tx queues : 2, # of Rx queues : 2 Jul 10 01:03:21.268774 kernel: libata version 3.00 loaded. Jul 10 01:03:21.268785 kernel: VMware PVSCSI driver - version 1.0.7.0-k Jul 10 01:03:21.268795 kernel: vmxnet3 0000:0b:00.0 eth0: NIC Link is Up 10000 Mbps Jul 10 01:03:21.268861 kernel: ata_piix 0000:00:07.1: version 2.13 Jul 10 01:03:21.279721 kernel: vmw_pvscsi: using 64bit dma Jul 10 01:03:21.279733 kernel: vmw_pvscsi: max_id: 16 Jul 10 01:03:21.279740 kernel: vmw_pvscsi: setting ring_pages to 8 Jul 10 01:03:21.279747 kernel: scsi host0: ata_piix Jul 10 01:03:21.279815 kernel: vmw_pvscsi: enabling reqCallThreshold Jul 10 01:03:21.279823 kernel: vmw_pvscsi: driver-based request coalescing enabled Jul 10 01:03:21.279833 kernel: vmw_pvscsi: using MSI-X Jul 10 01:03:21.279840 kernel: scsi host1: VMware PVSCSI storage adapter rev 2, req/cmp/msg rings: 8/8/1 pages, cmd_per_lun=254 Jul 10 01:03:21.279900 kernel: vmw_pvscsi 0000:03:00.0: VMware PVSCSI rev 2 host #1 Jul 10 01:03:21.279993 kernel: scsi host2: ata_piix Jul 10 01:03:21.280055 kernel: ata1: PATA max UDMA/33 cmd 0x1f0 ctl 0x3f6 bmdma 0x1060 irq 14 Jul 10 01:03:21.280063 kernel: ata2: PATA max UDMA/33 cmd 0x170 ctl 0x376 bmdma 0x1068 irq 15 Jul 10 01:03:21.282025 kernel: cryptd: max_cpu_qlen set to 1000 Jul 10 01:03:21.282047 kernel: scsi 1:0:0:0: Direct-Access VMware Virtual disk 2.0 PQ: 0 ANSI: 6 Jul 10 01:03:21.289092 kernel: vmxnet3 0000:0b:00.0 ens192: renamed from eth0 Jul 10 01:03:21.445095 kernel: ata2.00: ATAPI: VMware Virtual IDE CDROM Drive, 00000001, max UDMA/33 Jul 10 01:03:21.451098 kernel: scsi 2:0:0:0: CD-ROM NECVMWar VMware IDE CDR10 1.00 PQ: 0 ANSI: 5 Jul 10 01:03:21.460592 kernel: AVX2 version of gcm_enc/dec engaged. Jul 10 01:03:21.460638 kernel: AES CTR mode by8 optimization enabled Jul 10 01:03:21.467290 kernel: sd 1:0:0:0: [sda] 17805312 512-byte logical blocks: (9.12 GB/8.49 GiB) Jul 10 01:03:21.474268 kernel: sd 1:0:0:0: [sda] Write Protect is off Jul 10 01:03:21.474343 kernel: sd 1:0:0:0: [sda] Mode Sense: 31 00 00 00 Jul 10 01:03:21.474405 kernel: sd 1:0:0:0: [sda] Cache data unavailable Jul 10 01:03:21.474463 kernel: sd 1:0:0:0: [sda] Assuming drive cache: write through Jul 10 01:03:21.474521 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 10 01:03:21.474530 kernel: sd 1:0:0:0: [sda] Attached SCSI disk Jul 10 01:03:21.482124 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 1x/1x writer dvd-ram cd/rw xa/form2 cdda tray Jul 10 01:03:21.499695 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 10 01:03:21.499706 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 10 01:03:21.523094 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (472) Jul 10 01:03:21.527176 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 10 01:03:21.527317 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 10 01:03:21.527914 systemd[1]: Starting disk-uuid.service... Jul 10 01:03:21.531765 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 01:03:21.533781 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 10 01:03:21.536396 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 10 01:03:21.553096 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 10 01:03:21.558092 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 10 01:03:22.562606 disk-uuid[549]: The operation has completed successfully. Jul 10 01:03:22.565972 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 10 01:03:22.599727 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 10 01:03:22.600042 systemd[1]: Finished disk-uuid.service. Jul 10 01:03:22.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.600800 systemd[1]: Starting verity-setup.service... Jul 10 01:03:22.611093 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Jul 10 01:03:22.654430 systemd[1]: Found device dev-mapper-usr.device. Jul 10 01:03:22.655299 systemd[1]: Mounting sysusr-usr.mount... Jul 10 01:03:22.655805 systemd[1]: Finished verity-setup.service. Jul 10 01:03:22.655000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.723107 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 10 01:03:22.723128 systemd[1]: Mounted sysusr-usr.mount. Jul 10 01:03:22.723692 systemd[1]: Starting afterburn-network-kargs.service... Jul 10 01:03:22.724132 systemd[1]: Starting ignition-setup.service... Jul 10 01:03:22.739467 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 01:03:22.739484 kernel: BTRFS info (device sda6): using free space tree Jul 10 01:03:22.739492 kernel: BTRFS info (device sda6): has skinny extents Jul 10 01:03:22.746491 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 10 01:03:22.751336 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 10 01:03:22.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.756060 systemd[1]: Finished ignition-setup.service. Jul 10 01:03:22.756606 systemd[1]: Starting ignition-fetch-offline.service... Jul 10 01:03:22.805423 systemd[1]: Finished afterburn-network-kargs.service. Jul 10 01:03:22.804000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.806184 systemd[1]: Starting parse-ip-for-networkd.service... Jul 10 01:03:22.854465 systemd[1]: Finished parse-ip-for-networkd.service. Jul 10 01:03:22.855351 systemd[1]: Starting systemd-networkd.service... Jul 10 01:03:22.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.853000 audit: BPF prog-id=9 op=LOAD Jul 10 01:03:22.869507 systemd-networkd[735]: lo: Link UP Jul 10 01:03:22.869511 systemd-networkd[735]: lo: Gained carrier Jul 10 01:03:22.869809 systemd-networkd[735]: Enumeration completed Jul 10 01:03:22.869852 systemd[1]: Started systemd-networkd.service. Jul 10 01:03:22.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.870135 systemd-networkd[735]: ens192: Configuring with /etc/systemd/network/10-dracut-cmdline-99.network. Jul 10 01:03:22.870234 systemd[1]: Reached target network.target. Jul 10 01:03:22.870753 systemd[1]: Starting iscsiuio.service... Jul 10 01:03:22.873627 systemd[1]: Started iscsiuio.service. Jul 10 01:03:22.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.874299 systemd[1]: Starting iscsid.service... Jul 10 01:03:22.878982 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 10 01:03:22.879092 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 10 01:03:22.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.877422 systemd[1]: Started iscsid.service. Jul 10 01:03:22.879288 iscsid[740]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 10 01:03:22.879288 iscsid[740]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 10 01:03:22.879288 iscsid[740]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 10 01:03:22.879288 iscsid[740]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 10 01:03:22.879288 iscsid[740]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 10 01:03:22.879288 iscsid[740]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 10 01:03:22.878584 systemd[1]: Starting dracut-initqueue.service... Jul 10 01:03:22.880565 systemd-networkd[735]: ens192: Link UP Jul 10 01:03:22.880567 systemd-networkd[735]: ens192: Gained carrier Jul 10 01:03:22.885384 systemd[1]: Finished dracut-initqueue.service. Jul 10 01:03:22.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.885540 systemd[1]: Reached target remote-fs-pre.target. Jul 10 01:03:22.885632 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 01:03:22.885962 systemd[1]: Reached target remote-fs.target. Jul 10 01:03:22.886501 systemd[1]: Starting dracut-pre-mount.service... Jul 10 01:03:22.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.891373 systemd[1]: Finished dracut-pre-mount.service. Jul 10 01:03:22.895539 ignition[606]: Ignition 2.14.0 Jul 10 01:03:22.895544 ignition[606]: Stage: fetch-offline Jul 10 01:03:22.895572 ignition[606]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:03:22.895585 ignition[606]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:03:22.898683 ignition[606]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:03:22.898767 ignition[606]: parsed url from cmdline: "" Jul 10 01:03:22.898769 ignition[606]: no config URL provided Jul 10 01:03:22.898771 ignition[606]: reading system config file "/usr/lib/ignition/user.ign" Jul 10 01:03:22.898776 ignition[606]: no config at "/usr/lib/ignition/user.ign" Jul 10 01:03:22.904310 ignition[606]: config successfully fetched Jul 10 01:03:22.904331 ignition[606]: parsing config with SHA512: edf8dbd72cf5355690a8e15de8de780e28949c331a25774b9306b1ba263b5e01b2475739c93a215d03f42b1c4192c01c34f33da3cc3749a2fe8f5b13691b3744 Jul 10 01:03:22.908691 unknown[606]: fetched base config from "system" Jul 10 01:03:22.908829 unknown[606]: fetched user config from "vmware" Jul 10 01:03:22.909245 ignition[606]: fetch-offline: fetch-offline passed Jul 10 01:03:22.909410 ignition[606]: Ignition finished successfully Jul 10 01:03:22.909981 systemd[1]: Finished ignition-fetch-offline.service. Jul 10 01:03:22.910142 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 10 01:03:22.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.910542 systemd[1]: Starting ignition-kargs.service... Jul 10 01:03:22.915584 ignition[754]: Ignition 2.14.0 Jul 10 01:03:22.915590 ignition[754]: Stage: kargs Jul 10 01:03:22.915644 ignition[754]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:03:22.915654 ignition[754]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:03:22.916818 ignition[754]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:03:22.918171 ignition[754]: kargs: kargs passed Jul 10 01:03:22.918204 ignition[754]: Ignition finished successfully Jul 10 01:03:22.919029 systemd[1]: Finished ignition-kargs.service. Jul 10 01:03:22.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.919720 systemd[1]: Starting ignition-disks.service... Jul 10 01:03:22.923809 ignition[759]: Ignition 2.14.0 Jul 10 01:03:22.924001 ignition[759]: Stage: disks Jul 10 01:03:22.924172 ignition[759]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:03:22.924319 ignition[759]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:03:22.925601 ignition[759]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:03:22.926973 ignition[759]: disks: disks passed Jul 10 01:03:22.927013 ignition[759]: Ignition finished successfully Jul 10 01:03:22.927552 systemd[1]: Finished ignition-disks.service. Jul 10 01:03:22.927690 systemd[1]: Reached target initrd-root-device.target. Jul 10 01:03:22.927780 systemd[1]: Reached target local-fs-pre.target. Jul 10 01:03:22.927862 systemd[1]: Reached target local-fs.target. Jul 10 01:03:22.927940 systemd[1]: Reached target sysinit.target. Jul 10 01:03:22.928016 systemd[1]: Reached target basic.target. Jul 10 01:03:22.928532 systemd[1]: Starting systemd-fsck-root.service... Jul 10 01:03:22.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.971367 systemd-fsck[767]: ROOT: clean, 619/1628000 files, 124060/1617920 blocks Jul 10 01:03:22.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:22.973095 systemd[1]: Finished systemd-fsck-root.service. Jul 10 01:03:22.973793 systemd[1]: Mounting sysroot.mount... Jul 10 01:03:22.982914 systemd[1]: Mounted sysroot.mount. Jul 10 01:03:22.983098 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 10 01:03:22.983278 systemd[1]: Reached target initrd-root-fs.target. Jul 10 01:03:22.984448 systemd[1]: Mounting sysroot-usr.mount... Jul 10 01:03:22.985127 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 10 01:03:22.985379 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 10 01:03:22.985640 systemd[1]: Reached target ignition-diskful.target. Jul 10 01:03:22.986606 systemd[1]: Mounted sysroot-usr.mount. Jul 10 01:03:22.987372 systemd[1]: Starting initrd-setup-root.service... Jul 10 01:03:22.991045 initrd-setup-root[777]: cut: /sysroot/etc/passwd: No such file or directory Jul 10 01:03:22.996422 initrd-setup-root[785]: cut: /sysroot/etc/group: No such file or directory Jul 10 01:03:22.999197 initrd-setup-root[793]: cut: /sysroot/etc/shadow: No such file or directory Jul 10 01:03:23.001695 initrd-setup-root[801]: cut: /sysroot/etc/gshadow: No such file or directory Jul 10 01:03:23.062774 systemd[1]: Finished initrd-setup-root.service. Jul 10 01:03:23.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:23.063508 systemd[1]: Starting ignition-mount.service... Jul 10 01:03:23.064068 systemd[1]: Starting sysroot-boot.service... Jul 10 01:03:23.068701 bash[818]: umount: /sysroot/usr/share/oem: not mounted. Jul 10 01:03:23.074995 ignition[819]: INFO : Ignition 2.14.0 Jul 10 01:03:23.074995 ignition[819]: INFO : Stage: mount Jul 10 01:03:23.075364 ignition[819]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:03:23.075364 ignition[819]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:03:23.076641 ignition[819]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:03:23.078332 ignition[819]: INFO : mount: mount passed Jul 10 01:03:23.078332 ignition[819]: INFO : Ignition finished successfully Jul 10 01:03:23.078969 systemd[1]: Finished ignition-mount.service. Jul 10 01:03:23.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:23.085181 systemd[1]: Finished sysroot-boot.service. Jul 10 01:03:23.084000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:23.680386 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 01:03:23.691076 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (828) Jul 10 01:03:23.691110 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 01:03:23.691122 kernel: BTRFS info (device sda6): using free space tree Jul 10 01:03:23.691980 kernel: BTRFS info (device sda6): has skinny extents Jul 10 01:03:23.697097 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 10 01:03:23.698556 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 01:03:23.699391 systemd[1]: Starting ignition-files.service... Jul 10 01:03:23.710738 ignition[848]: INFO : Ignition 2.14.0 Jul 10 01:03:23.710738 ignition[848]: INFO : Stage: files Jul 10 01:03:23.711068 ignition[848]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:03:23.711068 ignition[848]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:03:23.712048 ignition[848]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:03:23.714092 ignition[848]: DEBUG : files: compiled without relabeling support, skipping Jul 10 01:03:23.714493 ignition[848]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 10 01:03:23.714493 ignition[848]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 10 01:03:23.716640 ignition[848]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 10 01:03:23.716890 ignition[848]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 10 01:03:23.717606 unknown[848]: wrote ssh authorized keys file for user: core Jul 10 01:03:23.717828 ignition[848]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 10 01:03:23.718165 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 10 01:03:23.718336 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 10 01:03:23.758427 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 10 01:03:23.897362 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 10 01:03:23.897665 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 10 01:03:23.897665 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 10 01:03:23.897665 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 10 01:03:23.898304 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 10 01:03:23.898304 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 01:03:23.899355 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 01:03:23.899574 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 01:03:23.973753 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 01:03:23.977595 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 01:03:23.977826 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 01:03:23.977826 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 01:03:23.977826 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 01:03:23.983212 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 10 01:03:23.983445 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Jul 10 01:03:23.990293 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4087554843" Jul 10 01:03:23.990577 ignition[848]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4087554843": device or resource busy Jul 10 01:03:23.990853 ignition[848]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem4087554843", trying btrfs: device or resource busy Jul 10 01:03:23.991156 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4087554843" Jul 10 01:03:23.991479 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem4087554843" Jul 10 01:03:24.001688 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem4087554843" Jul 10 01:03:24.001988 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem4087554843" Jul 10 01:03:24.002257 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 10 01:03:24.002520 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 01:03:24.002797 systemd[1]: mnt-oem4087554843.mount: Deactivated successfully. Jul 10 01:03:24.003217 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Jul 10 01:03:24.762358 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET result: OK Jul 10 01:03:24.913281 systemd-networkd[735]: ens192: Gained IPv6LL Jul 10 01:03:24.946255 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 10 01:03:24.946525 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 10 01:03:24.946700 ignition[848]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 10 01:03:24.946700 ignition[848]: INFO : files: op(10): [started] processing unit "vmtoolsd.service" Jul 10 01:03:24.946700 ignition[848]: INFO : files: op(10): [finished] processing unit "vmtoolsd.service" Jul 10 01:03:24.946700 ignition[848]: INFO : files: op(11): [started] processing unit "prepare-helm.service" Jul 10 01:03:24.946700 ignition[848]: INFO : files: op(11): op(12): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 01:03:24.946700 ignition[848]: INFO : files: op(11): op(12): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 01:03:24.946700 ignition[848]: INFO : files: op(11): [finished] processing unit "prepare-helm.service" Jul 10 01:03:24.946700 ignition[848]: INFO : files: op(13): [started] processing unit "coreos-metadata.service" Jul 10 01:03:24.946700 ignition[848]: INFO : files: op(13): op(14): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 01:03:24.948140 ignition[848]: INFO : files: op(13): op(14): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 01:03:24.948140 ignition[848]: INFO : files: op(13): [finished] processing unit "coreos-metadata.service" Jul 10 01:03:24.948140 ignition[848]: INFO : files: op(15): [started] setting preset to enabled for "vmtoolsd.service" Jul 10 01:03:24.948140 ignition[848]: INFO : files: op(15): [finished] setting preset to enabled for "vmtoolsd.service" Jul 10 01:03:24.948140 ignition[848]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" Jul 10 01:03:24.948140 ignition[848]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" Jul 10 01:03:24.948140 ignition[848]: INFO : files: op(17): [started] setting preset to disabled for "coreos-metadata.service" Jul 10 01:03:24.948140 ignition[848]: INFO : files: op(17): op(18): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 01:03:24.995669 ignition[848]: INFO : files: op(17): op(18): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 01:03:24.995918 ignition[848]: INFO : files: op(17): [finished] setting preset to disabled for "coreos-metadata.service" Jul 10 01:03:24.995918 ignition[848]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 10 01:03:24.995918 ignition[848]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 10 01:03:24.995918 ignition[848]: INFO : files: files passed Jul 10 01:03:24.995918 ignition[848]: INFO : Ignition finished successfully Jul 10 01:03:24.997500 systemd[1]: Finished ignition-files.service. Jul 10 01:03:24.999932 kernel: kauditd_printk_skb: 24 callbacks suppressed Jul 10 01:03:24.999960 kernel: audit: type=1130 audit(1752109404.996:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:24.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:24.998414 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 10 01:03:24.998534 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 10 01:03:24.998948 systemd[1]: Starting ignition-quench.service... Jul 10 01:03:25.004943 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 10 01:03:25.004997 systemd[1]: Finished ignition-quench.service. Jul 10 01:03:25.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.006473 initrd-setup-root-after-ignition[874]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 10 01:03:25.010393 kernel: audit: type=1130 audit(1752109405.004:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.010412 kernel: audit: type=1131 audit(1752109405.004:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.007800 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 10 01:03:25.013166 kernel: audit: type=1130 audit(1752109405.009:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.010520 systemd[1]: Reached target ignition-complete.target. Jul 10 01:03:25.013681 systemd[1]: Starting initrd-parse-etc.service... Jul 10 01:03:25.023145 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 10 01:03:25.023364 systemd[1]: Finished initrd-parse-etc.service. Jul 10 01:03:25.023647 systemd[1]: Reached target initrd-fs.target. Jul 10 01:03:25.022000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.027135 kernel: audit: type=1130 audit(1752109405.022:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.027156 kernel: audit: type=1131 audit(1752109405.022:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.028785 systemd[1]: Reached target initrd.target. Jul 10 01:03:25.028950 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 10 01:03:25.029523 systemd[1]: Starting dracut-pre-pivot.service... Jul 10 01:03:25.037934 systemd[1]: Finished dracut-pre-pivot.service. Jul 10 01:03:25.038751 systemd[1]: Starting initrd-cleanup.service... Jul 10 01:03:25.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.042104 kernel: audit: type=1130 audit(1752109405.037:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.044856 systemd[1]: Stopped target nss-lookup.target. Jul 10 01:03:25.045017 systemd[1]: Stopped target remote-cryptsetup.target. Jul 10 01:03:25.045250 systemd[1]: Stopped target timers.target. Jul 10 01:03:25.045426 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 10 01:03:25.045489 systemd[1]: Stopped dracut-pre-pivot.service. Jul 10 01:03:25.048185 kernel: audit: type=1131 audit(1752109405.044:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.045686 systemd[1]: Stopped target initrd.target. Jul 10 01:03:25.045818 systemd[1]: Stopped target basic.target. Jul 10 01:03:25.048285 systemd[1]: Stopped target ignition-complete.target. Jul 10 01:03:25.048477 systemd[1]: Stopped target ignition-diskful.target. Jul 10 01:03:25.048653 systemd[1]: Stopped target initrd-root-device.target. Jul 10 01:03:25.048851 systemd[1]: Stopped target remote-fs.target. Jul 10 01:03:25.049176 systemd[1]: Stopped target remote-fs-pre.target. Jul 10 01:03:25.049363 systemd[1]: Stopped target sysinit.target. Jul 10 01:03:25.049541 systemd[1]: Stopped target local-fs.target. Jul 10 01:03:25.049719 systemd[1]: Stopped target local-fs-pre.target. Jul 10 01:03:25.049892 systemd[1]: Stopped target swap.target. Jul 10 01:03:25.052632 kernel: audit: type=1131 audit(1752109405.049:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.049000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.050051 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 10 01:03:25.050131 systemd[1]: Stopped dracut-pre-mount.service. Jul 10 01:03:25.055325 kernel: audit: type=1131 audit(1752109405.051:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.050312 systemd[1]: Stopped target cryptsetup.target. Jul 10 01:03:25.054000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.052725 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 10 01:03:25.052782 systemd[1]: Stopped dracut-initqueue.service. Jul 10 01:03:25.052976 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 10 01:03:25.053033 systemd[1]: Stopped ignition-fetch-offline.service. Jul 10 01:03:25.055464 systemd[1]: Stopped target paths.target. Jul 10 01:03:25.055566 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 10 01:03:25.057107 systemd[1]: Stopped systemd-ask-password-console.path. Jul 10 01:03:25.057258 systemd[1]: Stopped target slices.target. Jul 10 01:03:25.057442 systemd[1]: Stopped target sockets.target. Jul 10 01:03:25.057625 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 10 01:03:25.056000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.057686 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 10 01:03:25.056000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.057855 systemd[1]: ignition-files.service: Deactivated successfully. Jul 10 01:03:25.057910 systemd[1]: Stopped ignition-files.service. Jul 10 01:03:25.058538 systemd[1]: Stopping ignition-mount.service... Jul 10 01:03:25.060604 iscsid[740]: iscsid shutting down. Jul 10 01:03:25.058740 systemd[1]: Stopping iscsid.service... Jul 10 01:03:25.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.061452 systemd[1]: Stopping sysroot-boot.service... Jul 10 01:03:25.065326 ignition[887]: INFO : Ignition 2.14.0 Jul 10 01:03:25.065326 ignition[887]: INFO : Stage: umount Jul 10 01:03:25.065326 ignition[887]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:03:25.065326 ignition[887]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:03:25.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.061559 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 10 01:03:25.071145 ignition[887]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:03:25.061638 systemd[1]: Stopped systemd-udev-trigger.service. Jul 10 01:03:25.061809 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 10 01:03:25.061867 systemd[1]: Stopped dracut-pre-trigger.service. Jul 10 01:03:25.063017 systemd[1]: iscsid.service: Deactivated successfully. Jul 10 01:03:25.063074 systemd[1]: Stopped iscsid.service. Jul 10 01:03:25.064037 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 10 01:03:25.072676 ignition[887]: INFO : umount: umount passed Jul 10 01:03:25.072676 ignition[887]: INFO : Ignition finished successfully Jul 10 01:03:25.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.064099 systemd[1]: Finished initrd-cleanup.service. Jul 10 01:03:25.064668 systemd[1]: iscsid.socket: Deactivated successfully. Jul 10 01:03:25.064703 systemd[1]: Closed iscsid.socket. Jul 10 01:03:25.064973 systemd[1]: Stopping iscsiuio.service... Jul 10 01:03:25.068824 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 10 01:03:25.068885 systemd[1]: Stopped iscsiuio.service. Jul 10 01:03:25.069037 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 10 01:03:25.069056 systemd[1]: Closed iscsiuio.socket. Jul 10 01:03:25.073603 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 10 01:03:25.073848 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 10 01:03:25.073898 systemd[1]: Stopped ignition-mount.service. Jul 10 01:03:25.074035 systemd[1]: Stopped target network.target. Jul 10 01:03:25.074126 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 10 01:03:25.074148 systemd[1]: Stopped ignition-disks.service. Jul 10 01:03:25.074250 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 10 01:03:25.074269 systemd[1]: Stopped ignition-kargs.service. Jul 10 01:03:25.074370 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 10 01:03:25.074389 systemd[1]: Stopped ignition-setup.service. Jul 10 01:03:25.074771 systemd[1]: Stopping systemd-networkd.service... Jul 10 01:03:25.074950 systemd[1]: Stopping systemd-resolved.service... Jul 10 01:03:25.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.079706 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 10 01:03:25.084000 audit: BPF prog-id=6 op=UNLOAD Jul 10 01:03:25.084000 audit: BPF prog-id=9 op=UNLOAD Jul 10 01:03:25.079758 systemd[1]: Stopped systemd-networkd.service. Jul 10 01:03:25.080874 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 10 01:03:25.080942 systemd[1]: Stopped systemd-resolved.service. Jul 10 01:03:25.081530 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 10 01:03:25.081550 systemd[1]: Closed systemd-networkd.socket. Jul 10 01:03:25.082031 systemd[1]: Stopping network-cleanup.service... Jul 10 01:03:25.082140 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 10 01:03:25.082168 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 10 01:03:25.082310 systemd[1]: afterburn-network-kargs.service: Deactivated successfully. Jul 10 01:03:25.082334 systemd[1]: Stopped afterburn-network-kargs.service. Jul 10 01:03:25.082442 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 10 01:03:25.082463 systemd[1]: Stopped systemd-sysctl.service. Jul 10 01:03:25.082627 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 10 01:03:25.082673 systemd[1]: Stopped systemd-modules-load.service. Jul 10 01:03:25.082825 systemd[1]: Stopping systemd-udevd.service... Jul 10 01:03:25.084947 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 10 01:03:25.088518 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 10 01:03:25.088611 systemd[1]: Stopped systemd-udevd.service. Jul 10 01:03:25.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.089450 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 10 01:03:25.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.089505 systemd[1]: Stopped network-cleanup.service. Jul 10 01:03:25.089706 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 10 01:03:25.089728 systemd[1]: Closed systemd-udevd-control.socket. Jul 10 01:03:25.089834 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 10 01:03:25.089851 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 10 01:03:25.089942 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 10 01:03:25.089964 systemd[1]: Stopped dracut-pre-udev.service. Jul 10 01:03:25.090070 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 10 01:03:25.090110 systemd[1]: Stopped dracut-cmdline.service. Jul 10 01:03:25.090387 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 10 01:03:25.090407 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 10 01:03:25.091152 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 10 01:03:25.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.094351 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 10 01:03:25.094385 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 10 01:03:25.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.095155 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 10 01:03:25.095182 systemd[1]: Stopped kmod-static-nodes.service. Jul 10 01:03:25.095297 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 10 01:03:25.095318 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 10 01:03:25.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.096025 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 10 01:03:25.096478 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 10 01:03:25.096536 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 10 01:03:25.095000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.285541 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 10 01:03:25.285619 systemd[1]: Stopped sysroot-boot.service. Jul 10 01:03:25.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.285979 systemd[1]: Reached target initrd-switch-root.target. Jul 10 01:03:25.286138 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 10 01:03:25.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.286178 systemd[1]: Stopped initrd-setup-root.service. Jul 10 01:03:25.286881 systemd[1]: Starting initrd-switch-root.service... Jul 10 01:03:25.295712 systemd[1]: Switching root. Jul 10 01:03:25.307362 systemd-journald[216]: Journal stopped Jul 10 01:03:27.401867 systemd-journald[216]: Received SIGTERM from PID 1 (systemd). Jul 10 01:03:27.401892 kernel: SELinux: Class mctp_socket not defined in policy. Jul 10 01:03:27.401900 kernel: SELinux: Class anon_inode not defined in policy. Jul 10 01:03:27.401907 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 10 01:03:27.401912 kernel: SELinux: policy capability network_peer_controls=1 Jul 10 01:03:27.401919 kernel: SELinux: policy capability open_perms=1 Jul 10 01:03:27.401926 kernel: SELinux: policy capability extended_socket_class=1 Jul 10 01:03:27.401932 kernel: SELinux: policy capability always_check_network=0 Jul 10 01:03:27.401938 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 10 01:03:27.401944 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 10 01:03:27.401950 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 10 01:03:27.401956 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 10 01:03:27.401963 systemd[1]: Successfully loaded SELinux policy in 38.614ms. Jul 10 01:03:27.401971 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.065ms. Jul 10 01:03:27.401979 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 01:03:27.401986 systemd[1]: Detected virtualization vmware. Jul 10 01:03:27.401994 systemd[1]: Detected architecture x86-64. Jul 10 01:03:27.402000 systemd[1]: Detected first boot. Jul 10 01:03:27.402008 systemd[1]: Initializing machine ID from random generator. Jul 10 01:03:27.402014 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 10 01:03:27.402020 systemd[1]: Populated /etc with preset unit settings. Jul 10 01:03:27.402027 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 01:03:27.402034 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 01:03:27.402042 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 01:03:27.402050 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 10 01:03:27.402057 systemd[1]: Stopped initrd-switch-root.service. Jul 10 01:03:27.402064 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 10 01:03:27.402071 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 10 01:03:27.402084 systemd[1]: Created slice system-addon\x2drun.slice. Jul 10 01:03:27.402091 systemd[1]: Created slice system-getty.slice. Jul 10 01:03:27.402098 systemd[1]: Created slice system-modprobe.slice. Jul 10 01:03:27.402106 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 10 01:03:27.404609 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 10 01:03:27.404624 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 10 01:03:27.404632 systemd[1]: Created slice user.slice. Jul 10 01:03:27.404639 systemd[1]: Started systemd-ask-password-console.path. Jul 10 01:03:27.404663 systemd[1]: Started systemd-ask-password-wall.path. Jul 10 01:03:27.404669 systemd[1]: Set up automount boot.automount. Jul 10 01:03:27.404676 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 10 01:03:27.404685 systemd[1]: Stopped target initrd-switch-root.target. Jul 10 01:03:27.404708 systemd[1]: Stopped target initrd-fs.target. Jul 10 01:03:27.404715 systemd[1]: Stopped target initrd-root-fs.target. Jul 10 01:03:27.404724 systemd[1]: Reached target integritysetup.target. Jul 10 01:03:27.404866 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 01:03:27.404874 systemd[1]: Reached target remote-fs.target. Jul 10 01:03:27.404881 systemd[1]: Reached target slices.target. Jul 10 01:03:27.404887 systemd[1]: Reached target swap.target. Jul 10 01:03:27.404895 systemd[1]: Reached target torcx.target. Jul 10 01:03:27.404955 systemd[1]: Reached target veritysetup.target. Jul 10 01:03:27.404963 systemd[1]: Listening on systemd-coredump.socket. Jul 10 01:03:27.404971 systemd[1]: Listening on systemd-initctl.socket. Jul 10 01:03:27.404977 systemd[1]: Listening on systemd-networkd.socket. Jul 10 01:03:27.404984 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 01:03:27.404992 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 01:03:27.405001 systemd[1]: Listening on systemd-userdbd.socket. Jul 10 01:03:27.405008 systemd[1]: Mounting dev-hugepages.mount... Jul 10 01:03:27.405015 systemd[1]: Mounting dev-mqueue.mount... Jul 10 01:03:27.405022 systemd[1]: Mounting media.mount... Jul 10 01:03:27.405029 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:03:27.405035 systemd[1]: Mounting sys-kernel-debug.mount... Jul 10 01:03:27.405042 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 10 01:03:27.405050 systemd[1]: Mounting tmp.mount... Jul 10 01:03:27.405057 systemd[1]: Starting flatcar-tmpfiles.service... Jul 10 01:03:27.405064 systemd[1]: Starting ignition-delete-config.service... Jul 10 01:03:27.405071 systemd[1]: Starting kmod-static-nodes.service... Jul 10 01:03:27.405089 systemd[1]: Starting modprobe@configfs.service... Jul 10 01:03:27.405097 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 01:03:27.405104 systemd[1]: Starting modprobe@drm.service... Jul 10 01:03:27.405111 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 01:03:27.405118 systemd[1]: Starting modprobe@fuse.service... Jul 10 01:03:27.405127 systemd[1]: Starting modprobe@loop.service... Jul 10 01:03:27.405437 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 10 01:03:27.405447 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 10 01:03:27.405454 systemd[1]: Stopped systemd-fsck-root.service. Jul 10 01:03:27.405461 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 10 01:03:27.405468 systemd[1]: Stopped systemd-fsck-usr.service. Jul 10 01:03:27.405474 systemd[1]: Stopped systemd-journald.service. Jul 10 01:03:27.405481 systemd[1]: Starting systemd-journald.service... Jul 10 01:03:27.405488 systemd[1]: Starting systemd-modules-load.service... Jul 10 01:03:27.405498 systemd[1]: Starting systemd-network-generator.service... Jul 10 01:03:27.405505 systemd[1]: Starting systemd-remount-fs.service... Jul 10 01:03:27.405512 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 01:03:27.405519 systemd[1]: verity-setup.service: Deactivated successfully. Jul 10 01:03:27.405526 systemd[1]: Stopped verity-setup.service. Jul 10 01:03:27.405533 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:03:27.405540 kernel: fuse: init (API version 7.34) Jul 10 01:03:27.405547 systemd[1]: Mounted dev-hugepages.mount. Jul 10 01:03:27.405554 systemd[1]: Mounted dev-mqueue.mount. Jul 10 01:03:27.405562 systemd[1]: Mounted media.mount. Jul 10 01:03:27.405569 systemd[1]: Mounted sys-kernel-debug.mount. Jul 10 01:03:27.405576 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 10 01:03:27.405583 systemd[1]: Mounted tmp.mount. Jul 10 01:03:27.405590 systemd[1]: Finished kmod-static-nodes.service. Jul 10 01:03:27.405597 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 10 01:03:27.405604 systemd[1]: Finished modprobe@configfs.service. Jul 10 01:03:27.405611 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 01:03:27.405618 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 01:03:27.405626 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 01:03:27.405633 systemd[1]: Finished modprobe@drm.service. Jul 10 01:03:27.405640 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 01:03:27.405647 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 01:03:27.405654 kernel: loop: module loaded Jul 10 01:03:27.405661 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 01:03:27.405668 systemd[1]: Finished modprobe@loop.service. Jul 10 01:03:27.405675 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 10 01:03:27.405683 systemd[1]: Finished modprobe@fuse.service. Jul 10 01:03:27.405690 systemd[1]: Finished systemd-modules-load.service. Jul 10 01:03:27.405697 systemd[1]: Finished systemd-network-generator.service. Jul 10 01:03:27.405704 systemd[1]: Finished systemd-remount-fs.service. Jul 10 01:03:27.405711 systemd[1]: Reached target network-pre.target. Jul 10 01:03:27.405717 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 10 01:03:27.405724 systemd[1]: Mounting sys-kernel-config.mount... Jul 10 01:03:27.405731 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 10 01:03:27.405741 systemd-journald[1008]: Journal started Jul 10 01:03:27.405772 systemd-journald[1008]: Runtime Journal (/run/log/journal/aee78b4d204d4635a081b5eba5e19308) is 4.8M, max 38.8M, 34.0M free. Jul 10 01:03:25.454000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 10 01:03:25.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 01:03:25.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 01:03:25.495000 audit: BPF prog-id=10 op=LOAD Jul 10 01:03:25.495000 audit: BPF prog-id=10 op=UNLOAD Jul 10 01:03:25.495000 audit: BPF prog-id=11 op=LOAD Jul 10 01:03:27.409631 systemd[1]: Starting systemd-hwdb-update.service... Jul 10 01:03:27.409647 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 01:03:25.495000 audit: BPF prog-id=11 op=UNLOAD Jul 10 01:03:25.584000 audit[920]: AVC avc: denied { associate } for pid=920 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 01:03:25.584000 audit[920]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d89c a1=c0000cede0 a2=c0000d70c0 a3=32 items=0 ppid=903 pid=920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:03:25.584000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 01:03:25.586000 audit[920]: AVC avc: denied { associate } for pid=920 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 01:03:25.586000 audit[920]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d975 a2=1ed a3=0 items=2 ppid=903 pid=920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:03:25.586000 audit: CWD cwd="/" Jul 10 01:03:25.586000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:25.586000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:25.586000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 01:03:27.274000 audit: BPF prog-id=12 op=LOAD Jul 10 01:03:27.274000 audit: BPF prog-id=3 op=UNLOAD Jul 10 01:03:27.274000 audit: BPF prog-id=13 op=LOAD Jul 10 01:03:27.274000 audit: BPF prog-id=14 op=LOAD Jul 10 01:03:27.274000 audit: BPF prog-id=4 op=UNLOAD Jul 10 01:03:27.274000 audit: BPF prog-id=5 op=UNLOAD Jul 10 01:03:27.275000 audit: BPF prog-id=15 op=LOAD Jul 10 01:03:27.275000 audit: BPF prog-id=12 op=UNLOAD Jul 10 01:03:27.275000 audit: BPF prog-id=16 op=LOAD Jul 10 01:03:27.275000 audit: BPF prog-id=17 op=LOAD Jul 10 01:03:27.275000 audit: BPF prog-id=13 op=UNLOAD Jul 10 01:03:27.275000 audit: BPF prog-id=14 op=UNLOAD Jul 10 01:03:27.276000 audit: BPF prog-id=18 op=LOAD Jul 10 01:03:27.276000 audit: BPF prog-id=15 op=UNLOAD Jul 10 01:03:27.276000 audit: BPF prog-id=19 op=LOAD Jul 10 01:03:27.276000 audit: BPF prog-id=20 op=LOAD Jul 10 01:03:27.276000 audit: BPF prog-id=16 op=UNLOAD Jul 10 01:03:27.276000 audit: BPF prog-id=17 op=UNLOAD Jul 10 01:03:27.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.284000 audit: BPF prog-id=18 op=UNLOAD Jul 10 01:03:27.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.344000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.344000 audit: BPF prog-id=21 op=LOAD Jul 10 01:03:27.344000 audit: BPF prog-id=22 op=LOAD Jul 10 01:03:27.344000 audit: BPF prog-id=23 op=LOAD Jul 10 01:03:27.344000 audit: BPF prog-id=19 op=UNLOAD Jul 10 01:03:27.344000 audit: BPF prog-id=20 op=UNLOAD Jul 10 01:03:27.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.375000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.378000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.387000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 10 01:03:27.387000 audit[1008]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7fffd35139b0 a2=4000 a3=7fffd3513a4c items=0 ppid=1 pid=1008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:03:27.387000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 10 01:03:27.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.391000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.274150 systemd[1]: Queued start job for default target multi-user.target. Jul 10 01:03:27.424949 systemd[1]: Starting systemd-random-seed.service... Jul 10 01:03:27.424966 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 01:03:27.424976 systemd[1]: Starting systemd-sysctl.service... Jul 10 01:03:27.425005 systemd[1]: Started systemd-journald.service. Jul 10 01:03:27.420000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.583375 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 01:03:27.274158 systemd[1]: Unnecessary job was removed for dev-sda6.device. Jul 10 01:03:25.583880 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 01:03:27.277499 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 10 01:03:25.583895 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 01:03:27.421877 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 10 01:03:25.583916 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 10 01:03:27.422005 systemd[1]: Mounted sys-kernel-config.mount. Jul 10 01:03:25.583922 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 10 01:03:27.424158 systemd[1]: Starting systemd-journal-flush.service... Jul 10 01:03:27.431188 systemd-journald[1008]: Time spent on flushing to /var/log/journal/aee78b4d204d4635a081b5eba5e19308 is 45.661ms for 1987 entries. Jul 10 01:03:27.431188 systemd-journald[1008]: System Journal (/var/log/journal/aee78b4d204d4635a081b5eba5e19308) is 8.0M, max 584.8M, 576.8M free. Jul 10 01:03:27.482461 systemd-journald[1008]: Received client request to flush runtime journal. Jul 10 01:03:27.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:25.583942 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 10 01:03:27.431018 systemd[1]: Finished systemd-random-seed.service. Jul 10 01:03:25.583949 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 10 01:03:27.431193 systemd[1]: Reached target first-boot-complete.target. Jul 10 01:03:25.584071 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 10 01:03:27.485461 jq[987]: true Jul 10 01:03:27.441965 systemd[1]: Finished flatcar-tmpfiles.service. Jul 10 01:03:25.584110 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 01:03:27.442915 systemd[1]: Starting systemd-sysusers.service... Jul 10 01:03:25.584118 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 01:03:27.444943 systemd[1]: Finished systemd-sysctl.service. Jul 10 01:03:25.584971 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 10 01:03:27.480112 systemd[1]: Finished systemd-sysusers.service. Jul 10 01:03:25.585003 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 10 01:03:27.481074 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 01:03:25.585015 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 10 01:03:27.483041 systemd[1]: Finished systemd-journal-flush.service. Jul 10 01:03:25.585023 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 10 01:03:25.585033 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 10 01:03:25.585041 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:25Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 10 01:03:27.040232 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:27Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 01:03:27.040440 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:27Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 01:03:27.040541 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:27Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 01:03:27.040695 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:27Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 01:03:27.489586 jq[1016]: true Jul 10 01:03:27.040740 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:27Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 10 01:03:27.040788 /usr/lib/systemd/system-generators/torcx-generator[920]: time="2025-07-10T01:03:27Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 10 01:03:27.508211 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 01:03:27.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.511103 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 01:03:27.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.512003 systemd[1]: Starting systemd-udev-settle.service... Jul 10 01:03:27.518163 udevadm[1053]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 10 01:03:27.522699 ignition[1026]: Ignition 2.14.0 Jul 10 01:03:27.522932 ignition[1026]: deleting config from guestinfo properties Jul 10 01:03:27.526447 ignition[1026]: Successfully deleted config Jul 10 01:03:27.527635 systemd[1]: Finished ignition-delete-config.service. Jul 10 01:03:27.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ignition-delete-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.856602 systemd[1]: Finished systemd-hwdb-update.service. Jul 10 01:03:27.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.856000 audit: BPF prog-id=24 op=LOAD Jul 10 01:03:27.856000 audit: BPF prog-id=25 op=LOAD Jul 10 01:03:27.856000 audit: BPF prog-id=7 op=UNLOAD Jul 10 01:03:27.856000 audit: BPF prog-id=8 op=UNLOAD Jul 10 01:03:27.857723 systemd[1]: Starting systemd-udevd.service... Jul 10 01:03:27.873005 systemd-udevd[1054]: Using default interface naming scheme 'v252'. Jul 10 01:03:27.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.894000 audit: BPF prog-id=26 op=LOAD Jul 10 01:03:27.894986 systemd[1]: Started systemd-udevd.service. Jul 10 01:03:27.896465 systemd[1]: Starting systemd-networkd.service... Jul 10 01:03:27.901000 audit: BPF prog-id=27 op=LOAD Jul 10 01:03:27.901000 audit: BPF prog-id=28 op=LOAD Jul 10 01:03:27.901000 audit: BPF prog-id=29 op=LOAD Jul 10 01:03:27.902970 systemd[1]: Starting systemd-userdbd.service... Jul 10 01:03:27.922444 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 10 01:03:27.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:27.938172 systemd[1]: Started systemd-userdbd.service. Jul 10 01:03:27.967134 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 10 01:03:27.971120 kernel: ACPI: button: Power Button [PWRF] Jul 10 01:03:28.004507 systemd-networkd[1063]: lo: Link UP Jul 10 01:03:28.004512 systemd-networkd[1063]: lo: Gained carrier Jul 10 01:03:28.004825 systemd-networkd[1063]: Enumeration completed Jul 10 01:03:28.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.004888 systemd-networkd[1063]: ens192: Configuring with /etc/systemd/network/00-vmware.network. Jul 10 01:03:28.004889 systemd[1]: Started systemd-networkd.service. Jul 10 01:03:28.007807 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 10 01:03:28.009033 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 10 01:03:28.009142 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): ens192: link becomes ready Jul 10 01:03:28.009099 systemd-networkd[1063]: ens192: Link UP Jul 10 01:03:28.009222 systemd-networkd[1063]: ens192: Gained carrier Jul 10 01:03:28.057000 audit[1060]: AVC avc: denied { confidentiality } for pid=1060 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 10 01:03:28.057000 audit[1060]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=56250e670910 a1=338ac a2=7f76930afbc5 a3=5 items=110 ppid=1054 pid=1060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:03:28.057000 audit: CWD cwd="/" Jul 10 01:03:28.057000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=1 name=(null) inode=19786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=2 name=(null) inode=19786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=3 name=(null) inode=19787 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=4 name=(null) inode=19786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=5 name=(null) inode=19788 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=6 name=(null) inode=19786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=7 name=(null) inode=19789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=8 name=(null) inode=19789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=9 name=(null) inode=19790 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=10 name=(null) inode=19789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=11 name=(null) inode=19791 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=12 name=(null) inode=19789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=13 name=(null) inode=19792 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=14 name=(null) inode=19789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=15 name=(null) inode=19793 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=16 name=(null) inode=19789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=17 name=(null) inode=19794 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=18 name=(null) inode=19786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=19 name=(null) inode=19795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=20 name=(null) inode=19795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=21 name=(null) inode=19796 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=22 name=(null) inode=19795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=23 name=(null) inode=19797 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=24 name=(null) inode=19795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=25 name=(null) inode=19798 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=26 name=(null) inode=19795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=27 name=(null) inode=19799 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=28 name=(null) inode=19795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=29 name=(null) inode=19800 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=30 name=(null) inode=19786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=31 name=(null) inode=19801 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=32 name=(null) inode=19801 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=33 name=(null) inode=19802 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=34 name=(null) inode=19801 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=35 name=(null) inode=19803 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=36 name=(null) inode=19801 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=37 name=(null) inode=19804 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=38 name=(null) inode=19801 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=39 name=(null) inode=19805 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=40 name=(null) inode=19801 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=41 name=(null) inode=19806 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=42 name=(null) inode=19786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=43 name=(null) inode=19807 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=44 name=(null) inode=19807 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=45 name=(null) inode=19808 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=46 name=(null) inode=19807 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=47 name=(null) inode=19809 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=48 name=(null) inode=19807 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=49 name=(null) inode=19810 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=50 name=(null) inode=19807 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=51 name=(null) inode=19811 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=52 name=(null) inode=19807 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=53 name=(null) inode=19812 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=55 name=(null) inode=19813 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=56 name=(null) inode=19813 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=57 name=(null) inode=19814 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=58 name=(null) inode=19813 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=59 name=(null) inode=19815 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=60 name=(null) inode=19813 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=61 name=(null) inode=19816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=62 name=(null) inode=19816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=63 name=(null) inode=19817 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=64 name=(null) inode=19816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=65 name=(null) inode=19818 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=66 name=(null) inode=19816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=67 name=(null) inode=19819 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=68 name=(null) inode=19816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=69 name=(null) inode=19820 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=70 name=(null) inode=19816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=71 name=(null) inode=19821 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=72 name=(null) inode=19813 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=73 name=(null) inode=19822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=74 name=(null) inode=19822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=75 name=(null) inode=19823 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=76 name=(null) inode=19822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=77 name=(null) inode=19824 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=78 name=(null) inode=19822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=79 name=(null) inode=19825 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=80 name=(null) inode=19822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=81 name=(null) inode=19826 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=82 name=(null) inode=19822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=83 name=(null) inode=19827 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=84 name=(null) inode=19813 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=85 name=(null) inode=19828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=86 name=(null) inode=19828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=87 name=(null) inode=19829 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=88 name=(null) inode=19828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=89 name=(null) inode=19830 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=90 name=(null) inode=19828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=91 name=(null) inode=19831 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=92 name=(null) inode=19828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.078917 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 01:03:28.057000 audit: PATH item=93 name=(null) inode=19832 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=94 name=(null) inode=19828 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=95 name=(null) inode=19833 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=96 name=(null) inode=19813 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=97 name=(null) inode=19834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=98 name=(null) inode=19834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=99 name=(null) inode=19835 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=100 name=(null) inode=19834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=101 name=(null) inode=19836 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=102 name=(null) inode=19834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=103 name=(null) inode=19837 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=104 name=(null) inode=19834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=105 name=(null) inode=19838 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=106 name=(null) inode=19834 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=107 name=(null) inode=19839 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PATH item=109 name=(null) inode=19840 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:03:28.057000 audit: PROCTITLE proctitle="(udev-worker)" Jul 10 01:03:28.091445 kernel: vmw_vmci 0000:00:07.7: Found VMCI PCI device at 0x11080, irq 16 Jul 10 01:03:28.097411 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input3 Jul 10 01:03:28.097426 kernel: vmw_vmci 0000:00:07.7: Using capabilities 0xc Jul 10 01:03:28.097514 kernel: piix4_smbus 0000:00:07.3: SMBus Host Controller not enabled! Jul 10 01:03:28.097858 kernel: mousedev: PS/2 mouse device common for all mice Jul 10 01:03:28.097872 kernel: Guest personality initialized and is active Jul 10 01:03:28.097896 kernel: VMCI host device registered (name=vmci, major=10, minor=125) Jul 10 01:03:28.097908 kernel: Initialized host personality Jul 10 01:03:28.102173 (udev-worker)[1066]: id: Truncating stdout of 'dmi_memory_id' up to 16384 byte. Jul 10 01:03:28.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.113427 systemd[1]: Finished systemd-udev-settle.service. Jul 10 01:03:28.114492 systemd[1]: Starting lvm2-activation-early.service... Jul 10 01:03:28.133633 lvm[1087]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 01:03:28.159755 systemd[1]: Finished lvm2-activation-early.service. Jul 10 01:03:28.158000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.159947 systemd[1]: Reached target cryptsetup.target. Jul 10 01:03:28.160916 systemd[1]: Starting lvm2-activation.service... Jul 10 01:03:28.163164 lvm[1088]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 01:03:28.179578 systemd[1]: Finished lvm2-activation.service. Jul 10 01:03:28.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.179746 systemd[1]: Reached target local-fs-pre.target. Jul 10 01:03:28.179847 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 10 01:03:28.179864 systemd[1]: Reached target local-fs.target. Jul 10 01:03:28.179952 systemd[1]: Reached target machines.target. Jul 10 01:03:28.180895 systemd[1]: Starting ldconfig.service... Jul 10 01:03:28.181639 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 01:03:28.181670 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:03:28.182396 systemd[1]: Starting systemd-boot-update.service... Jul 10 01:03:28.183051 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 10 01:03:28.183895 systemd[1]: Starting systemd-machine-id-commit.service... Jul 10 01:03:28.184725 systemd[1]: Starting systemd-sysext.service... Jul 10 01:03:28.193863 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1090 (bootctl) Jul 10 01:03:28.194551 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 10 01:03:28.198741 systemd[1]: Unmounting usr-share-oem.mount... Jul 10 01:03:28.208253 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 10 01:03:28.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.213724 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 10 01:03:28.213828 systemd[1]: Unmounted usr-share-oem.mount. Jul 10 01:03:28.229095 kernel: loop0: detected capacity change from 0 to 221472 Jul 10 01:03:28.529295 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 10 01:03:28.529683 systemd[1]: Finished systemd-machine-id-commit.service. Jul 10 01:03:28.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.543094 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 10 01:03:28.561673 systemd-fsck[1101]: fsck.fat 4.2 (2021-01-31) Jul 10 01:03:28.561673 systemd-fsck[1101]: /dev/sda1: 790 files, 120731/258078 clusters Jul 10 01:03:28.564585 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 10 01:03:28.563000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.565673 systemd[1]: Mounting boot.mount... Jul 10 01:03:28.572134 kernel: loop1: detected capacity change from 0 to 221472 Jul 10 01:03:28.572441 systemd[1]: Mounted boot.mount. Jul 10 01:03:28.581227 systemd[1]: Finished systemd-boot-update.service. Jul 10 01:03:28.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.593341 (sd-sysext)[1106]: Using extensions 'kubernetes'. Jul 10 01:03:28.594127 (sd-sysext)[1106]: Merged extensions into '/usr'. Jul 10 01:03:28.605107 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:03:28.605989 systemd[1]: Mounting usr-share-oem.mount... Jul 10 01:03:28.606818 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 01:03:28.607824 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 01:03:28.609233 systemd[1]: Starting modprobe@loop.service... Jul 10 01:03:28.609375 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 01:03:28.609455 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:03:28.609528 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:03:28.612179 systemd[1]: Mounted usr-share-oem.mount. Jul 10 01:03:28.612454 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 01:03:28.612524 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 01:03:28.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.612863 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 01:03:28.612931 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 01:03:28.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.613239 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 01:03:28.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.613301 systemd[1]: Finished modprobe@loop.service. Jul 10 01:03:28.613611 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 01:03:28.613672 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 01:03:28.614358 systemd[1]: Finished systemd-sysext.service. Jul 10 01:03:28.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.615362 systemd[1]: Starting ensure-sysext.service... Jul 10 01:03:28.618151 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 10 01:03:28.621063 systemd[1]: Reloading. Jul 10 01:03:28.626410 systemd-tmpfiles[1113]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 01:03:28.629935 systemd-tmpfiles[1113]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 01:03:28.632197 systemd-tmpfiles[1113]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 01:03:28.668036 /usr/lib/systemd/system-generators/torcx-generator[1132]: time="2025-07-10T01:03:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 01:03:28.668582 /usr/lib/systemd/system-generators/torcx-generator[1132]: time="2025-07-10T01:03:28Z" level=info msg="torcx already run" Jul 10 01:03:28.763404 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 01:03:28.763415 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 01:03:28.775049 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 01:03:28.807000 audit: BPF prog-id=30 op=LOAD Jul 10 01:03:28.808000 audit: BPF prog-id=31 op=LOAD Jul 10 01:03:28.808000 audit: BPF prog-id=24 op=UNLOAD Jul 10 01:03:28.808000 audit: BPF prog-id=25 op=UNLOAD Jul 10 01:03:28.808000 audit: BPF prog-id=32 op=LOAD Jul 10 01:03:28.808000 audit: BPF prog-id=21 op=UNLOAD Jul 10 01:03:28.808000 audit: BPF prog-id=33 op=LOAD Jul 10 01:03:28.808000 audit: BPF prog-id=34 op=LOAD Jul 10 01:03:28.808000 audit: BPF prog-id=22 op=UNLOAD Jul 10 01:03:28.808000 audit: BPF prog-id=23 op=UNLOAD Jul 10 01:03:28.809000 audit: BPF prog-id=35 op=LOAD Jul 10 01:03:28.809000 audit: BPF prog-id=27 op=UNLOAD Jul 10 01:03:28.809000 audit: BPF prog-id=36 op=LOAD Jul 10 01:03:28.809000 audit: BPF prog-id=37 op=LOAD Jul 10 01:03:28.809000 audit: BPF prog-id=28 op=UNLOAD Jul 10 01:03:28.809000 audit: BPF prog-id=29 op=UNLOAD Jul 10 01:03:28.809000 audit: BPF prog-id=38 op=LOAD Jul 10 01:03:28.809000 audit: BPF prog-id=26 op=UNLOAD Jul 10 01:03:28.812409 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 10 01:03:28.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.815208 systemd[1]: Starting audit-rules.service... Jul 10 01:03:28.815990 systemd[1]: Starting clean-ca-certificates.service... Jul 10 01:03:28.816828 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 10 01:03:28.818000 audit: BPF prog-id=39 op=LOAD Jul 10 01:03:28.819000 audit: BPF prog-id=40 op=LOAD Jul 10 01:03:28.820137 systemd[1]: Starting systemd-resolved.service... Jul 10 01:03:28.821305 systemd[1]: Starting systemd-timesyncd.service... Jul 10 01:03:28.822113 systemd[1]: Starting systemd-update-utmp.service... Jul 10 01:03:28.825021 systemd[1]: Finished clean-ca-certificates.service. Jul 10 01:03:28.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.825202 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 01:03:28.830461 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 01:03:28.831200 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 01:03:28.831892 systemd[1]: Starting modprobe@loop.service... Jul 10 01:03:28.832020 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 01:03:28.832102 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:03:28.832177 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 01:03:28.833571 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 01:03:28.833626 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:03:28.833680 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 01:03:28.835100 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 01:03:28.835181 systemd[1]: Finished modprobe@loop.service. Jul 10 01:03:28.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.834000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.837250 systemd[1]: Starting modprobe@drm.service... Jul 10 01:03:28.837994 systemd[1]: Starting modprobe@loop.service... Jul 10 01:03:28.838149 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 01:03:28.838230 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:03:28.839810 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 10 01:03:28.839953 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 01:03:28.840546 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 01:03:28.840618 systemd[1]: Finished modprobe@loop.service. Jul 10 01:03:28.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.842000 audit[1198]: SYSTEM_BOOT pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.846925 systemd[1]: Finished ensure-sysext.service. Jul 10 01:03:28.852016 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 10 01:03:28.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.852493 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 01:03:28.852565 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 01:03:28.852901 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 01:03:28.852974 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 01:03:28.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.853244 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 01:03:28.853301 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 01:03:28.854572 systemd[1]: Finished systemd-update-utmp.service. Jul 10 01:03:28.854773 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 01:03:28.854845 systemd[1]: Finished modprobe@drm.service. Jul 10 01:03:28.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.858372 ldconfig[1089]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 10 01:03:28.869944 systemd[1]: Finished ldconfig.service. Jul 10 01:03:28.871020 systemd[1]: Starting systemd-update-done.service... Jul 10 01:03:28.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.876187 systemd[1]: Finished systemd-update-done.service. Jul 10 01:03:28.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.906459 systemd[1]: Started systemd-timesyncd.service. Jul 10 01:03:28.906647 systemd[1]: Reached target time-set.target. Jul 10 01:03:28.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:03:28.913494 systemd-resolved[1196]: Positive Trust Anchors: Jul 10 01:03:28.913502 systemd-resolved[1196]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 01:03:28.913520 systemd-resolved[1196]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 01:03:28.917000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 10 01:03:28.917000 audit[1221]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff0db3d140 a2=420 a3=0 items=0 ppid=1193 pid=1221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:03:28.918856 augenrules[1221]: No rules Jul 10 01:03:28.917000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 10 01:03:28.919417 systemd[1]: Finished audit-rules.service. Jul 10 01:03:28.931421 systemd-resolved[1196]: Defaulting to hostname 'linux'. Jul 10 01:03:28.932426 systemd[1]: Started systemd-resolved.service. Jul 10 01:03:28.932558 systemd[1]: Reached target network.target. Jul 10 01:03:28.932652 systemd[1]: Reached target nss-lookup.target. Jul 10 01:03:28.932745 systemd[1]: Reached target sysinit.target. Jul 10 01:03:28.932884 systemd[1]: Started motdgen.path. Jul 10 01:03:28.933014 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 10 01:03:28.933206 systemd[1]: Started logrotate.timer. Jul 10 01:03:28.933335 systemd[1]: Started mdadm.timer. Jul 10 01:03:28.933415 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 10 01:03:28.933505 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 10 01:03:28.933525 systemd[1]: Reached target paths.target. Jul 10 01:03:28.933606 systemd[1]: Reached target timers.target. Jul 10 01:03:28.933834 systemd[1]: Listening on dbus.socket. Jul 10 01:03:28.934741 systemd[1]: Starting docker.socket... Jul 10 01:03:28.936457 systemd[1]: Listening on sshd.socket. Jul 10 01:03:28.936607 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:03:28.936847 systemd[1]: Listening on docker.socket. Jul 10 01:03:28.936968 systemd[1]: Reached target sockets.target. Jul 10 01:03:28.937053 systemd[1]: Reached target basic.target. Jul 10 01:03:28.937171 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 01:03:28.937184 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 01:03:28.937793 systemd[1]: Starting containerd.service... Jul 10 01:03:28.938686 systemd[1]: Starting dbus.service... Jul 10 01:03:28.939555 systemd[1]: Starting enable-oem-cloudinit.service... Jul 10 01:03:28.940404 systemd[1]: Starting extend-filesystems.service... Jul 10 01:03:28.940741 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 10 01:03:28.941650 systemd[1]: Starting motdgen.service... Jul 10 01:03:28.942964 systemd[1]: Starting prepare-helm.service... Jul 10 01:03:28.944186 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 10 01:03:28.944601 jq[1230]: false Jul 10 01:03:28.946880 systemd[1]: Starting sshd-keygen.service... Jul 10 01:03:28.948498 systemd[1]: Starting systemd-logind.service... Jul 10 01:03:28.948607 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:03:28.948650 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 10 01:04:55.254270 jq[1241]: true Jul 10 01:03:28.949087 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 10 01:03:28.949633 systemd[1]: Starting update-engine.service... Jul 10 01:03:28.950756 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 10 01:04:55.251739 systemd[1]: Starting vmtoolsd.service... Jul 10 01:04:55.252207 systemd-resolved[1196]: Clock change detected. Flushing caches. Jul 10 01:04:55.252739 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 10 01:04:55.252853 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 10 01:04:55.253391 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 10 01:04:55.253486 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 10 01:04:55.253800 systemd-timesyncd[1197]: Contacted time server 104.152.220.5:123 (0.flatcar.pool.ntp.org). Jul 10 01:04:55.253832 systemd-timesyncd[1197]: Initial clock synchronization to Thu 2025-07-10 01:04:55.251033 UTC. Jul 10 01:04:55.262241 jq[1245]: true Jul 10 01:04:55.272797 tar[1244]: linux-amd64/helm Jul 10 01:04:55.277936 systemd[1]: Started vmtoolsd.service. Jul 10 01:04:55.285869 extend-filesystems[1231]: Found loop1 Jul 10 01:04:55.288702 extend-filesystems[1231]: Found sda Jul 10 01:04:55.288877 extend-filesystems[1231]: Found sda1 Jul 10 01:04:55.289024 extend-filesystems[1231]: Found sda2 Jul 10 01:04:55.289166 extend-filesystems[1231]: Found sda3 Jul 10 01:04:55.289948 extend-filesystems[1231]: Found usr Jul 10 01:04:55.290120 extend-filesystems[1231]: Found sda4 Jul 10 01:04:55.290289 extend-filesystems[1231]: Found sda6 Jul 10 01:04:55.290628 extend-filesystems[1231]: Found sda7 Jul 10 01:04:55.290779 extend-filesystems[1231]: Found sda9 Jul 10 01:04:55.291095 extend-filesystems[1231]: Checking size of /dev/sda9 Jul 10 01:04:55.294084 systemd[1]: motdgen.service: Deactivated successfully. Jul 10 01:04:55.294203 systemd[1]: Finished motdgen.service. Jul 10 01:04:55.304712 extend-filesystems[1231]: Old size kept for /dev/sda9 Jul 10 01:04:55.304922 extend-filesystems[1231]: Found sr0 Jul 10 01:04:55.305309 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 10 01:04:55.305407 systemd[1]: Finished extend-filesystems.service. Jul 10 01:04:55.306350 dbus-daemon[1229]: [system] SELinux support is enabled Jul 10 01:04:55.306419 systemd[1]: Started dbus.service. Jul 10 01:04:55.307660 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 10 01:04:55.307677 systemd[1]: Reached target system-config.target. Jul 10 01:04:55.307788 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 10 01:04:55.307797 systemd[1]: Reached target user-config.target. Jul 10 01:04:55.343949 update_engine[1240]: I0710 01:04:55.342664 1240 main.cc:92] Flatcar Update Engine starting Jul 10 01:04:55.344200 kernel: NET: Registered PF_VSOCK protocol family Jul 10 01:04:55.344738 systemd[1]: Started update-engine.service. Jul 10 01:04:55.346118 systemd[1]: Started locksmithd.service. Jul 10 01:04:55.347286 update_engine[1240]: I0710 01:04:55.346618 1240 update_check_scheduler.cc:74] Next update check in 4m27s Jul 10 01:04:55.369226 bash[1278]: Updated "/home/core/.ssh/authorized_keys" Jul 10 01:04:55.369997 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 10 01:04:55.380146 env[1246]: time="2025-07-10T01:04:55.380116815Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 10 01:04:55.395778 systemd-logind[1238]: Watching system buttons on /dev/input/event1 (Power Button) Jul 10 01:04:55.395792 systemd-logind[1238]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 10 01:04:55.395984 systemd-logind[1238]: New seat seat0. Jul 10 01:04:55.396977 systemd[1]: Started systemd-logind.service. Jul 10 01:04:55.419517 env[1246]: time="2025-07-10T01:04:55.419487025Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 10 01:04:55.419597 env[1246]: time="2025-07-10T01:04:55.419579521Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 10 01:04:55.420911 env[1246]: time="2025-07-10T01:04:55.420353190Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 10 01:04:55.420911 env[1246]: time="2025-07-10T01:04:55.420371125Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 10 01:04:55.420911 env[1246]: time="2025-07-10T01:04:55.420510789Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 01:04:55.420911 env[1246]: time="2025-07-10T01:04:55.420524987Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 10 01:04:55.420911 env[1246]: time="2025-07-10T01:04:55.420533660Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 10 01:04:55.420911 env[1246]: time="2025-07-10T01:04:55.420539553Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 10 01:04:55.420911 env[1246]: time="2025-07-10T01:04:55.420583549Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 10 01:04:55.420911 env[1246]: time="2025-07-10T01:04:55.420718693Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 10 01:04:55.420911 env[1246]: time="2025-07-10T01:04:55.420799309Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 01:04:55.420911 env[1246]: time="2025-07-10T01:04:55.420808637Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 10 01:04:55.421115 env[1246]: time="2025-07-10T01:04:55.420837094Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 10 01:04:55.421115 env[1246]: time="2025-07-10T01:04:55.420844827Z" level=info msg="metadata content store policy set" policy=shared Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430078655Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430115809Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430129467Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430160434Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430172469Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430181561Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430203280Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430216025Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430223952Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430233711Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430244627Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430255710Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430348792Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 10 01:04:55.431165 env[1246]: time="2025-07-10T01:04:55.430417661Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430556359Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430573324Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430581161Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430606391Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430614871Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430622755Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430629532Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430636511Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430642821Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430648971Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430654829Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430661959Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430730428Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430740147Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431636 env[1246]: time="2025-07-10T01:04:55.430746724Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.431938 env[1246]: time="2025-07-10T01:04:55.430757745Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 10 01:04:55.431938 env[1246]: time="2025-07-10T01:04:55.430767974Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 10 01:04:55.431938 env[1246]: time="2025-07-10T01:04:55.430774815Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 10 01:04:55.431938 env[1246]: time="2025-07-10T01:04:55.430785427Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 10 01:04:55.431938 env[1246]: time="2025-07-10T01:04:55.430808606Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 10 01:04:55.432019 env[1246]: time="2025-07-10T01:04:55.430924532Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 10 01:04:55.432019 env[1246]: time="2025-07-10T01:04:55.430959645Z" level=info msg="Connect containerd service" Jul 10 01:04:55.432019 env[1246]: time="2025-07-10T01:04:55.430979797Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 10 01:04:55.434114 env[1246]: time="2025-07-10T01:04:55.432417405Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 01:04:55.434114 env[1246]: time="2025-07-10T01:04:55.432568738Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 10 01:04:55.434114 env[1246]: time="2025-07-10T01:04:55.432592040Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 10 01:04:55.434114 env[1246]: time="2025-07-10T01:04:55.432590226Z" level=info msg="Start subscribing containerd event" Jul 10 01:04:55.434114 env[1246]: time="2025-07-10T01:04:55.432630600Z" level=info msg="containerd successfully booted in 0.057777s" Jul 10 01:04:55.434114 env[1246]: time="2025-07-10T01:04:55.433145366Z" level=info msg="Start recovering state" Jul 10 01:04:55.434114 env[1246]: time="2025-07-10T01:04:55.433184651Z" level=info msg="Start event monitor" Jul 10 01:04:55.434114 env[1246]: time="2025-07-10T01:04:55.433206790Z" level=info msg="Start snapshots syncer" Jul 10 01:04:55.434114 env[1246]: time="2025-07-10T01:04:55.433217188Z" level=info msg="Start cni network conf syncer for default" Jul 10 01:04:55.434114 env[1246]: time="2025-07-10T01:04:55.433223336Z" level=info msg="Start streaming server" Jul 10 01:04:55.432677 systemd[1]: Started containerd.service. Jul 10 01:04:55.663288 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:04:55.663329 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:04:55.686320 tar[1244]: linux-amd64/LICENSE Jul 10 01:04:55.686421 tar[1244]: linux-amd64/README.md Jul 10 01:04:55.689069 systemd[1]: Finished prepare-helm.service. Jul 10 01:04:55.755981 locksmithd[1286]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 10 01:04:55.761671 sshd_keygen[1255]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 10 01:04:55.774114 systemd[1]: Finished sshd-keygen.service. Jul 10 01:04:55.775304 systemd[1]: Starting issuegen.service... Jul 10 01:04:55.778405 systemd[1]: issuegen.service: Deactivated successfully. Jul 10 01:04:55.778490 systemd[1]: Finished issuegen.service. Jul 10 01:04:55.779533 systemd[1]: Starting systemd-user-sessions.service... Jul 10 01:04:55.783931 systemd[1]: Finished systemd-user-sessions.service. Jul 10 01:04:55.784871 systemd[1]: Started getty@tty1.service. Jul 10 01:04:55.785716 systemd[1]: Started serial-getty@ttyS0.service. Jul 10 01:04:55.785919 systemd[1]: Reached target getty.target. Jul 10 01:04:56.140342 systemd-networkd[1063]: ens192: Gained IPv6LL Jul 10 01:04:56.141558 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 10 01:04:56.141887 systemd[1]: Reached target network-online.target. Jul 10 01:04:56.143311 systemd[1]: Starting kubelet.service... Jul 10 01:04:57.810531 systemd[1]: Started kubelet.service. Jul 10 01:04:57.811264 systemd[1]: Reached target multi-user.target. Jul 10 01:04:57.813249 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 10 01:04:57.818115 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 10 01:04:57.818730 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 10 01:04:57.819015 systemd[1]: Startup finished in 876ms (kernel) + 4.860s (initrd) + 6.117s (userspace) = 11.854s. Jul 10 01:04:57.875750 login[1354]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 10 01:04:57.877263 login[1355]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 10 01:04:57.887986 systemd[1]: Created slice user-500.slice. Jul 10 01:04:57.889144 systemd[1]: Starting user-runtime-dir@500.service... Jul 10 01:04:57.891550 systemd-logind[1238]: New session 2 of user core. Jul 10 01:04:57.897971 systemd-logind[1238]: New session 1 of user core. Jul 10 01:04:57.901085 systemd[1]: Finished user-runtime-dir@500.service. Jul 10 01:04:57.902712 systemd[1]: Starting user@500.service... Jul 10 01:04:57.906278 (systemd)[1363]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:04:58.000102 systemd[1363]: Queued start job for default target default.target. Jul 10 01:04:58.001110 systemd[1363]: Reached target paths.target. Jul 10 01:04:58.001202 systemd[1363]: Reached target sockets.target. Jul 10 01:04:58.001273 systemd[1363]: Reached target timers.target. Jul 10 01:04:58.001333 systemd[1363]: Reached target basic.target. Jul 10 01:04:58.001452 systemd[1]: Started user@500.service. Jul 10 01:04:58.002256 systemd[1]: Started session-1.scope. Jul 10 01:04:58.002786 systemd[1]: Started session-2.scope. Jul 10 01:04:58.005256 systemd[1363]: Reached target default.target. Jul 10 01:04:58.005290 systemd[1363]: Startup finished in 94ms. Jul 10 01:04:58.823938 kubelet[1360]: E0710 01:04:58.823893 1360 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 01:04:58.825063 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 01:04:58.825169 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 01:05:09.075919 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 10 01:05:09.076080 systemd[1]: Stopped kubelet.service. Jul 10 01:05:09.077390 systemd[1]: Starting kubelet.service... Jul 10 01:05:09.370566 systemd[1]: Started kubelet.service. Jul 10 01:05:09.408379 kubelet[1392]: E0710 01:05:09.408336 1392 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 01:05:09.410385 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 01:05:09.410463 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 01:05:19.660991 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 10 01:05:19.661140 systemd[1]: Stopped kubelet.service. Jul 10 01:05:19.662234 systemd[1]: Starting kubelet.service... Jul 10 01:05:20.045914 systemd[1]: Started kubelet.service. Jul 10 01:05:20.137867 kubelet[1401]: E0710 01:05:20.137830 1401 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 01:05:20.139218 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 01:05:20.139323 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 01:05:25.465865 systemd[1]: Created slice system-sshd.slice. Jul 10 01:05:25.466773 systemd[1]: Started sshd@0-139.178.70.108:22-139.178.68.195:54622.service. Jul 10 01:05:25.593936 sshd[1407]: Accepted publickey for core from 139.178.68.195 port 54622 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:05:25.594719 sshd[1407]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:05:25.597818 systemd[1]: Started session-3.scope. Jul 10 01:05:25.598101 systemd-logind[1238]: New session 3 of user core. Jul 10 01:05:25.645951 systemd[1]: Started sshd@1-139.178.70.108:22-139.178.68.195:54626.service. Jul 10 01:05:25.685554 sshd[1412]: Accepted publickey for core from 139.178.68.195 port 54626 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:05:25.686455 sshd[1412]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:05:25.689745 systemd[1]: Started session-4.scope. Jul 10 01:05:25.690108 systemd-logind[1238]: New session 4 of user core. Jul 10 01:05:25.743568 sshd[1412]: pam_unix(sshd:session): session closed for user core Jul 10 01:05:25.745899 systemd[1]: Started sshd@2-139.178.70.108:22-139.178.68.195:54642.service. Jul 10 01:05:25.746854 systemd[1]: sshd@1-139.178.70.108:22-139.178.68.195:54626.service: Deactivated successfully. Jul 10 01:05:25.747301 systemd[1]: session-4.scope: Deactivated successfully. Jul 10 01:05:25.747660 systemd-logind[1238]: Session 4 logged out. Waiting for processes to exit. Jul 10 01:05:25.748267 systemd-logind[1238]: Removed session 4. Jul 10 01:05:25.782577 sshd[1417]: Accepted publickey for core from 139.178.68.195 port 54642 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:05:25.783492 sshd[1417]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:05:25.786221 systemd-logind[1238]: New session 5 of user core. Jul 10 01:05:25.786938 systemd[1]: Started session-5.scope. Jul 10 01:05:25.834988 sshd[1417]: pam_unix(sshd:session): session closed for user core Jul 10 01:05:25.837749 systemd[1]: sshd@2-139.178.70.108:22-139.178.68.195:54642.service: Deactivated successfully. Jul 10 01:05:25.838236 systemd[1]: session-5.scope: Deactivated successfully. Jul 10 01:05:25.838702 systemd-logind[1238]: Session 5 logged out. Waiting for processes to exit. Jul 10 01:05:25.839471 systemd[1]: Started sshd@3-139.178.70.108:22-139.178.68.195:54652.service. Jul 10 01:05:25.841295 systemd-logind[1238]: Removed session 5. Jul 10 01:05:25.877606 sshd[1424]: Accepted publickey for core from 139.178.68.195 port 54652 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:05:25.878808 sshd[1424]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:05:25.881894 systemd-logind[1238]: New session 6 of user core. Jul 10 01:05:25.882451 systemd[1]: Started session-6.scope. Jul 10 01:05:25.934926 sshd[1424]: pam_unix(sshd:session): session closed for user core Jul 10 01:05:25.937787 systemd[1]: sshd@3-139.178.70.108:22-139.178.68.195:54652.service: Deactivated successfully. Jul 10 01:05:25.938268 systemd[1]: session-6.scope: Deactivated successfully. Jul 10 01:05:25.938773 systemd-logind[1238]: Session 6 logged out. Waiting for processes to exit. Jul 10 01:05:25.939678 systemd[1]: Started sshd@4-139.178.70.108:22-139.178.68.195:54664.service. Jul 10 01:05:25.941296 systemd-logind[1238]: Removed session 6. Jul 10 01:05:25.978424 sshd[1430]: Accepted publickey for core from 139.178.68.195 port 54664 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:05:25.979658 sshd[1430]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:05:25.983080 systemd[1]: Started session-7.scope. Jul 10 01:05:25.983919 systemd-logind[1238]: New session 7 of user core. Jul 10 01:05:26.118318 sudo[1433]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 10 01:05:26.119371 sudo[1433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 01:05:26.127392 dbus-daemon[1229]: \xd0\xcd\u0019\x86\xc8U: received setenforce notice (enforcing=902825120) Jul 10 01:05:26.127526 sudo[1433]: pam_unix(sudo:session): session closed for user root Jul 10 01:05:26.130487 sshd[1430]: pam_unix(sshd:session): session closed for user core Jul 10 01:05:26.132517 systemd[1]: Started sshd@5-139.178.70.108:22-139.178.68.195:54674.service. Jul 10 01:05:26.133887 systemd[1]: sshd@4-139.178.70.108:22-139.178.68.195:54664.service: Deactivated successfully. Jul 10 01:05:26.134438 systemd[1]: session-7.scope: Deactivated successfully. Jul 10 01:05:26.135279 systemd-logind[1238]: Session 7 logged out. Waiting for processes to exit. Jul 10 01:05:26.135959 systemd-logind[1238]: Removed session 7. Jul 10 01:05:26.171865 sshd[1436]: Accepted publickey for core from 139.178.68.195 port 54674 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:05:26.172780 sshd[1436]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:05:26.175591 systemd-logind[1238]: New session 8 of user core. Jul 10 01:05:26.176127 systemd[1]: Started session-8.scope. Jul 10 01:05:26.226382 sudo[1441]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 10 01:05:26.226558 sudo[1441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 01:05:26.228564 sudo[1441]: pam_unix(sudo:session): session closed for user root Jul 10 01:05:26.232102 sudo[1440]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 10 01:05:26.232294 sudo[1440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 01:05:26.239267 systemd[1]: Stopping audit-rules.service... Jul 10 01:05:26.240000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 01:05:26.244817 kernel: kauditd_printk_skb: 291 callbacks suppressed Jul 10 01:05:26.244858 kernel: audit: type=1305 audit(1752109526.240:212): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 01:05:26.240000 audit[1444]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd0ae443a0 a2=420 a3=0 items=0 ppid=1 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.247135 auditctl[1444]: No rules Jul 10 01:05:26.251664 kernel: audit: type=1300 audit(1752109526.240:212): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd0ae443a0 a2=420 a3=0 items=0 ppid=1 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.247472 systemd[1]: audit-rules.service: Deactivated successfully. Jul 10 01:05:26.247596 systemd[1]: Stopped audit-rules.service. Jul 10 01:05:26.252101 systemd[1]: Starting audit-rules.service... Jul 10 01:05:26.240000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 10 01:05:26.256775 kernel: audit: type=1327 audit(1752109526.240:212): proctitle=2F7362696E2F617564697463746C002D44 Jul 10 01:05:26.256804 kernel: audit: type=1131 audit(1752109526.247:213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.247000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.264154 augenrules[1461]: No rules Jul 10 01:05:26.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.264629 systemd[1]: Finished audit-rules.service. Jul 10 01:05:26.265158 sudo[1440]: pam_unix(sudo:session): session closed for user root Jul 10 01:05:26.266389 sshd[1436]: pam_unix(sshd:session): session closed for user core Jul 10 01:05:26.269215 kernel: audit: type=1130 audit(1752109526.264:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.270631 systemd[1]: Started sshd@6-139.178.70.108:22-139.178.68.195:54686.service. Jul 10 01:05:26.271201 systemd[1]: sshd@5-139.178.70.108:22-139.178.68.195:54674.service: Deactivated successfully. Jul 10 01:05:26.264000 audit[1440]: USER_END pid=1440 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.271608 systemd[1]: session-8.scope: Deactivated successfully. Jul 10 01:05:26.277413 kernel: audit: type=1106 audit(1752109526.264:215): pid=1440 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.277440 kernel: audit: type=1104 audit(1752109526.265:216): pid=1440 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.265000 audit[1440]: CRED_DISP pid=1440 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.277576 systemd-logind[1238]: Session 8 logged out. Waiting for processes to exit. Jul 10 01:05:26.270000 audit[1436]: USER_END pid=1436 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:05:26.281497 kernel: audit: type=1106 audit(1752109526.270:217): pid=1436 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:05:26.270000 audit[1436]: CRED_DISP pid=1436 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:05:26.284515 kernel: audit: type=1104 audit(1752109526.270:218): pid=1436 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:05:26.284591 systemd-logind[1238]: Removed session 8. Jul 10 01:05:26.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.108:22-139.178.68.195:54686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.287624 kernel: audit: type=1130 audit(1752109526.270:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.108:22-139.178.68.195:54686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.271000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-139.178.70.108:22-139.178.68.195:54674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.312000 audit[1466]: USER_ACCT pid=1466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:05:26.312645 sshd[1466]: Accepted publickey for core from 139.178.68.195 port 54686 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:05:26.313000 audit[1466]: CRED_ACQ pid=1466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:05:26.313000 audit[1466]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd4c9b540 a2=3 a3=0 items=0 ppid=1 pid=1466 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.313000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:05:26.313834 sshd[1466]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:05:26.316367 systemd-logind[1238]: New session 9 of user core. Jul 10 01:05:26.316929 systemd[1]: Started session-9.scope. Jul 10 01:05:26.319000 audit[1466]: USER_START pid=1466 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:05:26.320000 audit[1469]: CRED_ACQ pid=1469 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:05:26.365000 audit[1470]: USER_ACCT pid=1470 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.365000 audit[1470]: CRED_REFR pid=1470 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.365404 sudo[1470]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 10 01:05:26.365556 sudo[1470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 01:05:26.366000 audit[1470]: USER_START pid=1470 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:05:26.386232 systemd[1]: Starting docker.service... Jul 10 01:05:26.421253 env[1480]: time="2025-07-10T01:05:26.421227983Z" level=info msg="Starting up" Jul 10 01:05:26.422121 env[1480]: time="2025-07-10T01:05:26.422109253Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 01:05:26.422171 env[1480]: time="2025-07-10T01:05:26.422160857Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 01:05:26.422233 env[1480]: time="2025-07-10T01:05:26.422222462Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 01:05:26.422281 env[1480]: time="2025-07-10T01:05:26.422271520Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 01:05:26.423089 env[1480]: time="2025-07-10T01:05:26.423078871Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 01:05:26.423138 env[1480]: time="2025-07-10T01:05:26.423128988Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 01:05:26.423197 env[1480]: time="2025-07-10T01:05:26.423177081Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 01:05:26.423473 env[1480]: time="2025-07-10T01:05:26.423463526Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 01:05:26.604987 env[1480]: time="2025-07-10T01:05:26.604941907Z" level=info msg="Loading containers: start." Jul 10 01:05:26.660000 audit[1510]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1510 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.660000 audit[1510]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffef6e50c90 a2=0 a3=7ffef6e50c7c items=0 ppid=1480 pid=1510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.660000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 10 01:05:26.661000 audit[1512]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1512 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.661000 audit[1512]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe5c53cd20 a2=0 a3=7ffe5c53cd0c items=0 ppid=1480 pid=1512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.661000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 10 01:05:26.662000 audit[1514]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1514 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.662000 audit[1514]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff56f11850 a2=0 a3=7fff56f1183c items=0 ppid=1480 pid=1514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.662000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 01:05:26.664000 audit[1516]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1516 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.664000 audit[1516]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc67c70b00 a2=0 a3=7ffc67c70aec items=0 ppid=1480 pid=1516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.664000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 01:05:26.674000 audit[1518]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1518 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.674000 audit[1518]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdfb0c4890 a2=0 a3=7ffdfb0c487c items=0 ppid=1480 pid=1518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.674000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 10 01:05:26.701000 audit[1523]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1523 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.701000 audit[1523]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffea7067600 a2=0 a3=7ffea70675ec items=0 ppid=1480 pid=1523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.701000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 10 01:05:26.747000 audit[1525]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1525 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.747000 audit[1525]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd26932600 a2=0 a3=7ffd269325ec items=0 ppid=1480 pid=1525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.747000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 10 01:05:26.748000 audit[1527]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1527 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.748000 audit[1527]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc453c4840 a2=0 a3=7ffc453c482c items=0 ppid=1480 pid=1527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.748000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 10 01:05:26.750000 audit[1529]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1529 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.750000 audit[1529]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffe85141910 a2=0 a3=7ffe851418fc items=0 ppid=1480 pid=1529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.750000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 01:05:26.797000 audit[1533]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1533 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.797000 audit[1533]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff7db09230 a2=0 a3=7fff7db0921c items=0 ppid=1480 pid=1533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.797000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 01:05:26.801000 audit[1534]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1534 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.801000 audit[1534]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff6118d310 a2=0 a3=7fff6118d2fc items=0 ppid=1480 pid=1534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.801000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 01:05:26.816218 kernel: Initializing XFRM netlink socket Jul 10 01:05:26.845445 env[1480]: time="2025-07-10T01:05:26.845422318Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 10 01:05:26.868000 audit[1542]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1542 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.868000 audit[1542]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffeb1e4d540 a2=0 a3=7ffeb1e4d52c items=0 ppid=1480 pid=1542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.868000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 10 01:05:26.888000 audit[1545]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1545 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.888000 audit[1545]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd3f541a30 a2=0 a3=7ffd3f541a1c items=0 ppid=1480 pid=1545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.888000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 10 01:05:26.890000 audit[1548]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1548 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.890000 audit[1548]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff49934100 a2=0 a3=7fff499340ec items=0 ppid=1480 pid=1548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.890000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 10 01:05:26.892000 audit[1550]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1550 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.892000 audit[1550]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffd29a95b0 a2=0 a3=7fffd29a959c items=0 ppid=1480 pid=1550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.892000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 10 01:05:26.894000 audit[1552]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1552 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.894000 audit[1552]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff2b730a10 a2=0 a3=7fff2b7309fc items=0 ppid=1480 pid=1552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.894000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 10 01:05:26.895000 audit[1554]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1554 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.895000 audit[1554]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc641e1510 a2=0 a3=7ffc641e14fc items=0 ppid=1480 pid=1554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.895000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 10 01:05:26.897000 audit[1556]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1556 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.897000 audit[1556]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe4ecc7630 a2=0 a3=7ffe4ecc761c items=0 ppid=1480 pid=1556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.897000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 10 01:05:26.931000 audit[1559]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1559 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.931000 audit[1559]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd11d81b30 a2=0 a3=7ffd11d81b1c items=0 ppid=1480 pid=1559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.931000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 10 01:05:26.934000 audit[1562]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1562 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.934000 audit[1562]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffdf57e3e90 a2=0 a3=7ffdf57e3e7c items=0 ppid=1480 pid=1562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.934000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 01:05:26.936000 audit[1564]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1564 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.936000 audit[1564]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffdbdfe99d0 a2=0 a3=7ffdbdfe99bc items=0 ppid=1480 pid=1564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.936000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 01:05:26.938000 audit[1566]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1566 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.938000 audit[1566]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdd36744c0 a2=0 a3=7ffdd36744ac items=0 ppid=1480 pid=1566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.938000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 10 01:05:26.938883 systemd-networkd[1063]: docker0: Link UP Jul 10 01:05:26.985000 audit[1570]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1570 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.985000 audit[1570]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe257183d0 a2=0 a3=7ffe257183bc items=0 ppid=1480 pid=1570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.985000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 01:05:26.989000 audit[1571]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1571 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:26.989000 audit[1571]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc87fd2f00 a2=0 a3=7ffc87fd2eec items=0 ppid=1480 pid=1571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:26.989000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 01:05:26.990420 env[1480]: time="2025-07-10T01:05:26.990394507Z" level=info msg="Loading containers: done." Jul 10 01:05:26.998391 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3206400274-merged.mount: Deactivated successfully. Jul 10 01:05:27.008257 env[1480]: time="2025-07-10T01:05:27.008225097Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 10 01:05:27.008539 env[1480]: time="2025-07-10T01:05:27.008525171Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 10 01:05:27.008678 env[1480]: time="2025-07-10T01:05:27.008667287Z" level=info msg="Daemon has completed initialization" Jul 10 01:05:27.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:27.019060 systemd[1]: Started docker.service. Jul 10 01:05:27.022042 env[1480]: time="2025-07-10T01:05:27.022018709Z" level=info msg="API listen on /run/docker.sock" Jul 10 01:05:28.939783 env[1246]: time="2025-07-10T01:05:28.939748484Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 10 01:05:29.979399 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1971850953.mount: Deactivated successfully. Jul 10 01:05:30.390094 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 10 01:05:30.390344 systemd[1]: Stopped kubelet.service. Jul 10 01:05:30.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:30.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:30.391713 systemd[1]: Starting kubelet.service... Jul 10 01:05:30.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:30.452593 systemd[1]: Started kubelet.service. Jul 10 01:05:30.500561 kubelet[1607]: E0710 01:05:30.500537 1607 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 01:05:30.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 01:05:30.501628 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 01:05:30.501704 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 01:05:32.138129 env[1246]: time="2025-07-10T01:05:32.138064547Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:32.138966 env[1246]: time="2025-07-10T01:05:32.138943391Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:32.140467 env[1246]: time="2025-07-10T01:05:32.140447651Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:32.141965 env[1246]: time="2025-07-10T01:05:32.141943176Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:32.142684 env[1246]: time="2025-07-10T01:05:32.142656774Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977\"" Jul 10 01:05:32.143086 env[1246]: time="2025-07-10T01:05:32.143053339Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 10 01:05:33.942054 env[1246]: time="2025-07-10T01:05:33.942012340Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:33.963367 env[1246]: time="2025-07-10T01:05:33.963335214Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:33.976967 env[1246]: time="2025-07-10T01:05:33.976945839Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:33.989082 env[1246]: time="2025-07-10T01:05:33.989064909Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:33.989527 env[1246]: time="2025-07-10T01:05:33.989508687Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d\"" Jul 10 01:05:33.989885 env[1246]: time="2025-07-10T01:05:33.989873496Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 10 01:05:35.692470 env[1246]: time="2025-07-10T01:05:35.692428326Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:35.716174 env[1246]: time="2025-07-10T01:05:35.716146357Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:35.730368 env[1246]: time="2025-07-10T01:05:35.730344261Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:35.742702 env[1246]: time="2025-07-10T01:05:35.742678565Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:35.743331 env[1246]: time="2025-07-10T01:05:35.743307035Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2\"" Jul 10 01:05:35.743850 env[1246]: time="2025-07-10T01:05:35.743834160Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 10 01:05:37.500432 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount64093022.mount: Deactivated successfully. Jul 10 01:05:38.050137 env[1246]: time="2025-07-10T01:05:38.050105079Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:38.065474 env[1246]: time="2025-07-10T01:05:38.065454711Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:38.073148 env[1246]: time="2025-07-10T01:05:38.073132066Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:38.086638 env[1246]: time="2025-07-10T01:05:38.086619334Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:38.086970 env[1246]: time="2025-07-10T01:05:38.086951066Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c\"" Jul 10 01:05:38.087517 env[1246]: time="2025-07-10T01:05:38.087500814Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 10 01:05:38.657784 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3824890710.mount: Deactivated successfully. Jul 10 01:05:39.471121 env[1246]: time="2025-07-10T01:05:39.471088097Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:39.485544 env[1246]: time="2025-07-10T01:05:39.485528286Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:39.500238 env[1246]: time="2025-07-10T01:05:39.500219872Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:39.505197 env[1246]: time="2025-07-10T01:05:39.505174972Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:39.505645 env[1246]: time="2025-07-10T01:05:39.505626298Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 10 01:05:39.506370 env[1246]: time="2025-07-10T01:05:39.506353635Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 10 01:05:39.999859 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount539622398.mount: Deactivated successfully. Jul 10 01:05:40.002127 env[1246]: time="2025-07-10T01:05:40.002096628Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:40.003400 env[1246]: time="2025-07-10T01:05:40.003385179Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:40.004628 env[1246]: time="2025-07-10T01:05:40.004611644Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:40.005798 env[1246]: time="2025-07-10T01:05:40.005782439Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:40.006080 env[1246]: time="2025-07-10T01:05:40.006063134Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 10 01:05:40.006889 env[1246]: time="2025-07-10T01:05:40.006870408Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 10 01:05:40.503718 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount373801169.mount: Deactivated successfully. Jul 10 01:05:40.504277 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 10 01:05:40.510028 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 10 01:05:40.510072 kernel: audit: type=1130 audit(1752109540.504:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:40.510089 kernel: audit: type=1131 audit(1752109540.504:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:40.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:40.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:40.504370 systemd[1]: Stopped kubelet.service. Jul 10 01:05:40.505299 systemd[1]: Starting kubelet.service... Jul 10 01:05:40.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:40.582771 systemd[1]: Started kubelet.service. Jul 10 01:05:40.586211 kernel: audit: type=1130 audit(1752109540.582:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:40.707430 kubelet[1617]: E0710 01:05:40.707404 1617 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 01:05:40.708000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 01:05:40.708728 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 01:05:40.708800 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 01:05:40.712208 kernel: audit: type=1131 audit(1752109540.708:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 01:05:40.967877 update_engine[1240]: I0710 01:05:40.967669 1240 update_attempter.cc:509] Updating boot flags... Jul 10 01:05:42.523806 env[1246]: time="2025-07-10T01:05:42.523759753Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:42.524960 env[1246]: time="2025-07-10T01:05:42.524944982Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:42.526361 env[1246]: time="2025-07-10T01:05:42.526345593Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:42.527572 env[1246]: time="2025-07-10T01:05:42.527557315Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:42.528028 env[1246]: time="2025-07-10T01:05:42.528009496Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Jul 10 01:05:44.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:44.931636 systemd[1]: Stopped kubelet.service. Jul 10 01:05:44.933631 systemd[1]: Starting kubelet.service... Jul 10 01:05:44.930000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:44.936692 kernel: audit: type=1130 audit(1752109544.930:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:44.936734 kernel: audit: type=1131 audit(1752109544.930:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:44.959493 systemd[1]: Reloading. Jul 10 01:05:45.031489 /usr/lib/systemd/system-generators/torcx-generator[1682]: time="2025-07-10T01:05:45Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 01:05:45.031507 /usr/lib/systemd/system-generators/torcx-generator[1682]: time="2025-07-10T01:05:45Z" level=info msg="torcx already run" Jul 10 01:05:45.087736 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 01:05:45.087860 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 01:05:45.100395 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 01:05:45.149481 kernel: audit: type=1400 audit(1752109545.141:264): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.149572 kernel: audit: type=1400 audit(1752109545.141:265): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.149594 kernel: audit: type=1400 audit(1752109545.142:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.152274 kernel: audit: type=1400 audit(1752109545.142:267): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.142000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.142000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.146000 audit: BPF prog-id=46 op=LOAD Jul 10 01:05:45.146000 audit: BPF prog-id=41 op=UNLOAD Jul 10 01:05:45.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.146000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.146000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit: BPF prog-id=47 op=LOAD Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit: BPF prog-id=48 op=LOAD Jul 10 01:05:45.148000 audit: BPF prog-id=42 op=UNLOAD Jul 10 01:05:45.148000 audit: BPF prog-id=43 op=UNLOAD Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit: BPF prog-id=49 op=LOAD Jul 10 01:05:45.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.151000 audit: BPF prog-id=50 op=LOAD Jul 10 01:05:45.151000 audit: BPF prog-id=30 op=UNLOAD Jul 10 01:05:45.151000 audit: BPF prog-id=31 op=UNLOAD Jul 10 01:05:45.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.153000 audit: BPF prog-id=51 op=LOAD Jul 10 01:05:45.153000 audit: BPF prog-id=39 op=UNLOAD Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit: BPF prog-id=52 op=LOAD Jul 10 01:05:45.154000 audit: BPF prog-id=32 op=UNLOAD Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit: BPF prog-id=53 op=LOAD Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.154000 audit: BPF prog-id=54 op=LOAD Jul 10 01:05:45.154000 audit: BPF prog-id=33 op=UNLOAD Jul 10 01:05:45.154000 audit: BPF prog-id=34 op=UNLOAD Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit: BPF prog-id=55 op=LOAD Jul 10 01:05:45.156000 audit: BPF prog-id=35 op=UNLOAD Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit: BPF prog-id=56 op=LOAD Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.156000 audit: BPF prog-id=57 op=LOAD Jul 10 01:05:45.156000 audit: BPF prog-id=36 op=UNLOAD Jul 10 01:05:45.156000 audit: BPF prog-id=37 op=UNLOAD Jul 10 01:05:45.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.159000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.159000 audit: BPF prog-id=58 op=LOAD Jul 10 01:05:45.159000 audit: BPF prog-id=38 op=UNLOAD Jul 10 01:05:45.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.160000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.160000 audit: BPF prog-id=59 op=LOAD Jul 10 01:05:45.160000 audit: BPF prog-id=44 op=UNLOAD Jul 10 01:05:45.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:45.161000 audit: BPF prog-id=60 op=LOAD Jul 10 01:05:45.161000 audit: BPF prog-id=40 op=UNLOAD Jul 10 01:05:45.176844 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 10 01:05:45.176894 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 10 01:05:45.177151 systemd[1]: Stopped kubelet.service. Jul 10 01:05:45.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 01:05:45.178602 systemd[1]: Starting kubelet.service... Jul 10 01:05:45.699943 systemd[1]: Started kubelet.service. Jul 10 01:05:45.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:45.703198 kernel: kauditd_printk_skb: 169 callbacks suppressed Jul 10 01:05:45.703239 kernel: audit: type=1130 audit(1752109545.698:437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:45.738519 kubelet[1746]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 01:05:45.738519 kubelet[1746]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 10 01:05:45.738519 kubelet[1746]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 01:05:45.738838 kubelet[1746]: I0710 01:05:45.738551 1746 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 01:05:45.943106 kubelet[1746]: I0710 01:05:45.943057 1746 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 10 01:05:45.943106 kubelet[1746]: I0710 01:05:45.943099 1746 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 01:05:45.943519 kubelet[1746]: I0710 01:05:45.943509 1746 server.go:934] "Client rotation is on, will bootstrap in background" Jul 10 01:05:45.970159 kubelet[1746]: E0710 01:05:45.970093 1746 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://139.178.70.108:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" Jul 10 01:05:45.970968 kubelet[1746]: I0710 01:05:45.970956 1746 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 01:05:45.978257 kubelet[1746]: E0710 01:05:45.978236 1746 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 01:05:45.978257 kubelet[1746]: I0710 01:05:45.978254 1746 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 01:05:45.981425 kubelet[1746]: I0710 01:05:45.981413 1746 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 01:05:45.982028 kubelet[1746]: I0710 01:05:45.982016 1746 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 10 01:05:45.982122 kubelet[1746]: I0710 01:05:45.982101 1746 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 01:05:45.982267 kubelet[1746]: I0710 01:05:45.982123 1746 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 01:05:45.982360 kubelet[1746]: I0710 01:05:45.982272 1746 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 01:05:45.982360 kubelet[1746]: I0710 01:05:45.982279 1746 container_manager_linux.go:300] "Creating device plugin manager" Jul 10 01:05:45.982399 kubelet[1746]: I0710 01:05:45.982373 1746 state_mem.go:36] "Initialized new in-memory state store" Jul 10 01:05:45.990104 kubelet[1746]: I0710 01:05:45.990089 1746 kubelet.go:408] "Attempting to sync node with API server" Jul 10 01:05:45.990148 kubelet[1746]: I0710 01:05:45.990140 1746 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 01:05:45.990174 kubelet[1746]: I0710 01:05:45.990160 1746 kubelet.go:314] "Adding apiserver pod source" Jul 10 01:05:45.990174 kubelet[1746]: I0710 01:05:45.990169 1746 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 01:05:45.994650 kubelet[1746]: W0710 01:05:45.994622 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://139.178.70.108:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 139.178.70.108:6443: connect: connection refused Jul 10 01:05:45.994731 kubelet[1746]: E0710 01:05:45.994719 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://139.178.70.108:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" Jul 10 01:05:45.999624 kubelet[1746]: I0710 01:05:45.999607 1746 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 01:05:45.999866 kubelet[1746]: I0710 01:05:45.999852 1746 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 01:05:45.999894 kubelet[1746]: W0710 01:05:45.999890 1746 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 10 01:05:46.014047 kubelet[1746]: W0710 01:05:46.014010 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://139.178.70.108:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 139.178.70.108:6443: connect: connection refused Jul 10 01:05:46.014178 kubelet[1746]: E0710 01:05:46.014162 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://139.178.70.108:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" Jul 10 01:05:46.019434 kubelet[1746]: I0710 01:05:46.019419 1746 server.go:1274] "Started kubelet" Jul 10 01:05:46.042001 kubelet[1746]: I0710 01:05:46.041935 1746 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 01:05:46.042224 kubelet[1746]: I0710 01:05:46.042207 1746 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 01:05:46.042335 kubelet[1746]: I0710 01:05:46.042314 1746 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 01:05:46.043076 kubelet[1746]: I0710 01:05:46.043059 1746 server.go:449] "Adding debug handlers to kubelet server" Jul 10 01:05:46.101000 audit[1746]: AVC avc: denied { mac_admin } for pid=1746 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:46.103949 kubelet[1746]: I0710 01:05:46.103260 1746 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 01:05:46.103949 kubelet[1746]: I0710 01:05:46.103296 1746 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 10 01:05:46.103949 kubelet[1746]: I0710 01:05:46.103353 1746 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 01:05:46.101000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:05:46.107363 kernel: audit: type=1400 audit(1752109546.101:438): avc: denied { mac_admin } for pid=1746 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:46.107415 kernel: audit: type=1401 audit(1752109546.101:438): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:05:46.107433 kernel: audit: type=1300 audit(1752109546.101:438): arch=c000003e syscall=188 success=no exit=-22 a0=c0009dcd50 a1=c0006668e8 a2=c0009dcd20 a3=25 items=0 ppid=1 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.101000 audit[1746]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009dcd50 a1=c0006668e8 a2=c0009dcd20 a3=25 items=0 ppid=1 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.101000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:05:46.117260 kernel: audit: type=1327 audit(1752109546.101:438): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:05:46.117302 kernel: audit: type=1400 audit(1752109546.101:439): avc: denied { mac_admin } for pid=1746 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:46.101000 audit[1746]: AVC avc: denied { mac_admin } for pid=1746 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:46.101000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:05:46.121763 kernel: audit: type=1401 audit(1752109546.101:439): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:05:46.121840 kubelet[1746]: I0710 01:05:46.121825 1746 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 01:05:46.127285 kernel: audit: type=1300 audit(1752109546.101:439): arch=c000003e syscall=188 success=no exit=-22 a0=c0008c8320 a1=c000666900 a2=c0009dcde0 a3=25 items=0 ppid=1 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.101000 audit[1746]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0008c8320 a1=c000666900 a2=c0009dcde0 a3=25 items=0 ppid=1 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.127374 kubelet[1746]: I0710 01:05:46.123697 1746 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 10 01:05:46.127374 kubelet[1746]: E0710 01:05:46.123813 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:46.127374 kubelet[1746]: I0710 01:05:46.124128 1746 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 10 01:05:46.127374 kubelet[1746]: I0710 01:05:46.124161 1746 reconciler.go:26] "Reconciler: start to sync state" Jul 10 01:05:46.101000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:05:46.119000 audit[1758]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:46.132860 kernel: audit: type=1327 audit(1752109546.101:439): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:05:46.132883 kernel: audit: type=1325 audit(1752109546.119:440): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:46.119000 audit[1758]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe6fb8db00 a2=0 a3=7ffe6fb8daec items=0 ppid=1746 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.119000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 01:05:46.119000 audit[1759]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1759 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:46.119000 audit[1759]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe94a727a0 a2=0 a3=7ffe94a7278c items=0 ppid=1746 pid=1759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.119000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 01:05:46.124000 audit[1761]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1761 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:46.124000 audit[1761]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd946bbfc0 a2=0 a3=7ffd946bbfac items=0 ppid=1746 pid=1761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.124000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 01:05:46.125000 audit[1763]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:46.125000 audit[1763]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc5fdd2a80 a2=0 a3=7ffc5fdd2a6c items=0 ppid=1746 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.125000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 01:05:46.164583 kubelet[1746]: W0710 01:05:46.164541 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://139.178.70.108:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 139.178.70.108:6443: connect: connection refused Jul 10 01:05:46.164699 kubelet[1746]: E0710 01:05:46.164681 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://139.178.70.108:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" Jul 10 01:05:46.164822 kubelet[1746]: E0710 01:05:46.164804 1746 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.108:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.108:6443: connect: connection refused" interval="200ms" Jul 10 01:05:46.165069 kubelet[1746]: E0710 01:05:46.128393 1746 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.108:6443/api/v1/namespaces/default/events\": dial tcp 139.178.70.108:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850be595a0e9f29 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 01:05:46.019397417 +0000 UTC m=+0.315808402,LastTimestamp:2025-07-10 01:05:46.019397417 +0000 UTC m=+0.315808402,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 01:05:46.168105 kubelet[1746]: I0710 01:05:46.168088 1746 factory.go:221] Registration of the systemd container factory successfully Jul 10 01:05:46.168672 kubelet[1746]: I0710 01:05:46.168164 1746 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 01:05:46.169240 kubelet[1746]: I0710 01:05:46.169223 1746 factory.go:221] Registration of the containerd container factory successfully Jul 10 01:05:46.192265 kubelet[1746]: I0710 01:05:46.192242 1746 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 10 01:05:46.192265 kubelet[1746]: I0710 01:05:46.192253 1746 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 10 01:05:46.192378 kubelet[1746]: I0710 01:05:46.192282 1746 state_mem.go:36] "Initialized new in-memory state store" Jul 10 01:05:46.192000 audit[1768]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1768 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:46.192000 audit[1768]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffef80b2f30 a2=0 a3=7ffef80b2f1c items=0 ppid=1746 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.192000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 10 01:05:46.194104 kubelet[1746]: I0710 01:05:46.194089 1746 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 01:05:46.193000 audit[1769]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1769 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:46.193000 audit[1769]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffde3adf80 a2=0 a3=7fffde3adf6c items=0 ppid=1746 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.193000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 01:05:46.193000 audit[1770]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:46.193000 audit[1770]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffaabac4c0 a2=0 a3=7fffaabac4ac items=0 ppid=1746 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.193000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 01:05:46.195387 kubelet[1746]: I0710 01:05:46.195375 1746 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 01:05:46.195453 kubelet[1746]: I0710 01:05:46.195443 1746 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 10 01:05:46.195523 kubelet[1746]: I0710 01:05:46.195513 1746 kubelet.go:2321] "Starting kubelet main sync loop" Jul 10 01:05:46.195606 kubelet[1746]: E0710 01:05:46.195594 1746 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 01:05:46.196138 kubelet[1746]: W0710 01:05:46.196123 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://139.178.70.108:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 139.178.70.108:6443: connect: connection refused Jul 10 01:05:46.196237 kubelet[1746]: E0710 01:05:46.196224 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://139.178.70.108:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" Jul 10 01:05:46.195000 audit[1773]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:46.195000 audit[1773]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd4939fb50 a2=0 a3=7ffd4939fb3c items=0 ppid=1746 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.195000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 01:05:46.196000 audit[1774]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1774 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:46.196000 audit[1774]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc2ca836c0 a2=0 a3=7ffc2ca836ac items=0 ppid=1746 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.196000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 01:05:46.196000 audit[1775]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1775 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:46.196000 audit[1775]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc38658320 a2=0 a3=7ffc3865830c items=0 ppid=1746 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.196000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 01:05:46.197000 audit[1776]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1776 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:46.197000 audit[1776]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffe2a300d10 a2=0 a3=7ffe2a300cfc items=0 ppid=1746 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.197000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 01:05:46.198000 audit[1777]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1777 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:46.198000 audit[1777]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe0db54f90 a2=0 a3=7ffe0db54f7c items=0 ppid=1746 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.198000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 01:05:46.226229 kubelet[1746]: E0710 01:05:46.224090 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:46.248387 kubelet[1746]: I0710 01:05:46.248373 1746 policy_none.go:49] "None policy: Start" Jul 10 01:05:46.249111 kubelet[1746]: I0710 01:05:46.249078 1746 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 10 01:05:46.249162 kubelet[1746]: I0710 01:05:46.249118 1746 state_mem.go:35] "Initializing new in-memory state store" Jul 10 01:05:46.271034 systemd[1]: Created slice kubepods.slice. Jul 10 01:05:46.274692 systemd[1]: Created slice kubepods-burstable.slice. Jul 10 01:05:46.277149 systemd[1]: Created slice kubepods-besteffort.slice. Jul 10 01:05:46.283785 kubelet[1746]: I0710 01:05:46.283771 1746 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 01:05:46.282000 audit[1746]: AVC avc: denied { mac_admin } for pid=1746 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:46.282000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:05:46.282000 audit[1746]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d76540 a1=c000d7ac48 a2=c000d76510 a3=25 items=0 ppid=1 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:46.282000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:05:46.284067 kubelet[1746]: I0710 01:05:46.284053 1746 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 01:05:46.284213 kubelet[1746]: I0710 01:05:46.284202 1746 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 01:05:46.284298 kubelet[1746]: I0710 01:05:46.284273 1746 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 01:05:46.285764 kubelet[1746]: I0710 01:05:46.284901 1746 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 01:05:46.286410 kubelet[1746]: E0710 01:05:46.286399 1746 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 10 01:05:46.301645 systemd[1]: Created slice kubepods-burstable-pod795f69a91dc182145837222cdb53e291.slice. Jul 10 01:05:46.309284 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 10 01:05:46.311839 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 10 01:05:46.325569 kubelet[1746]: I0710 01:05:46.325552 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/795f69a91dc182145837222cdb53e291-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"795f69a91dc182145837222cdb53e291\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:05:46.325646 kubelet[1746]: I0710 01:05:46.325571 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:05:46.325646 kubelet[1746]: I0710 01:05:46.325613 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:05:46.325646 kubelet[1746]: I0710 01:05:46.325626 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 10 01:05:46.325646 kubelet[1746]: I0710 01:05:46.325635 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/795f69a91dc182145837222cdb53e291-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"795f69a91dc182145837222cdb53e291\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:05:46.325646 kubelet[1746]: I0710 01:05:46.325644 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/795f69a91dc182145837222cdb53e291-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"795f69a91dc182145837222cdb53e291\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:05:46.325760 kubelet[1746]: I0710 01:05:46.325678 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:05:46.325760 kubelet[1746]: I0710 01:05:46.325690 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:05:46.325760 kubelet[1746]: I0710 01:05:46.325698 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:05:46.366077 kubelet[1746]: E0710 01:05:46.366042 1746 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.108:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.108:6443: connect: connection refused" interval="400ms" Jul 10 01:05:46.385936 kubelet[1746]: I0710 01:05:46.385882 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 01:05:46.386154 kubelet[1746]: E0710 01:05:46.386140 1746 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.108:6443/api/v1/nodes\": dial tcp 139.178.70.108:6443: connect: connection refused" node="localhost" Jul 10 01:05:46.587644 kubelet[1746]: I0710 01:05:46.587613 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 01:05:46.587852 kubelet[1746]: E0710 01:05:46.587833 1746 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.108:6443/api/v1/nodes\": dial tcp 139.178.70.108:6443: connect: connection refused" node="localhost" Jul 10 01:05:46.608570 env[1246]: time="2025-07-10T01:05:46.608535225Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:795f69a91dc182145837222cdb53e291,Namespace:kube-system,Attempt:0,}" Jul 10 01:05:46.611292 env[1246]: time="2025-07-10T01:05:46.611262747Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 10 01:05:46.614038 env[1246]: time="2025-07-10T01:05:46.613845919Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 10 01:05:46.767319 kubelet[1746]: E0710 01:05:46.767287 1746 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.108:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.108:6443: connect: connection refused" interval="800ms" Jul 10 01:05:46.989556 kubelet[1746]: I0710 01:05:46.989242 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 01:05:46.989556 kubelet[1746]: E0710 01:05:46.989445 1746 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.108:6443/api/v1/nodes\": dial tcp 139.178.70.108:6443: connect: connection refused" node="localhost" Jul 10 01:05:47.084442 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount959738479.mount: Deactivated successfully. Jul 10 01:05:47.086914 env[1246]: time="2025-07-10T01:05:47.086895838Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.087461 env[1246]: time="2025-07-10T01:05:47.087448327Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.088418 env[1246]: time="2025-07-10T01:05:47.088400718Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.088703 kubelet[1746]: E0710 01:05:47.088648 1746 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.108:6443/api/v1/namespaces/default/events\": dial tcp 139.178.70.108:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850be595a0e9f29 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 01:05:46.019397417 +0000 UTC m=+0.315808402,LastTimestamp:2025-07-10 01:05:46.019397417 +0000 UTC m=+0.315808402,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 01:05:47.091723 env[1246]: time="2025-07-10T01:05:47.091706592Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.092546 env[1246]: time="2025-07-10T01:05:47.092533818Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.094783 env[1246]: time="2025-07-10T01:05:47.094767608Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.095157 env[1246]: time="2025-07-10T01:05:47.095144659Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.096763 env[1246]: time="2025-07-10T01:05:47.096747434Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.099097 env[1246]: time="2025-07-10T01:05:47.099084908Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.099891 env[1246]: time="2025-07-10T01:05:47.099879052Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.100674 env[1246]: time="2025-07-10T01:05:47.100657588Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.101036 env[1246]: time="2025-07-10T01:05:47.101019902Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:05:47.120007 env[1246]: time="2025-07-10T01:05:47.117903904Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:05:47.120007 env[1246]: time="2025-07-10T01:05:47.117921425Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:05:47.120007 env[1246]: time="2025-07-10T01:05:47.117928216Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:05:47.120007 env[1246]: time="2025-07-10T01:05:47.118002410Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/36994ee7c20691b6aa0c560c02f0e838f510122aed250d3960d4892028bec8ea pid=1806 runtime=io.containerd.runc.v2 Jul 10 01:05:47.120175 env[1246]: time="2025-07-10T01:05:47.114466189Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:05:47.120175 env[1246]: time="2025-07-10T01:05:47.114495706Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:05:47.120175 env[1246]: time="2025-07-10T01:05:47.114502527Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:05:47.120175 env[1246]: time="2025-07-10T01:05:47.114570962Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a588db7f7968a15fd1970fc5a82c9111c868d98058759c7a695dcc380d054906 pid=1796 runtime=io.containerd.runc.v2 Jul 10 01:05:47.129833 systemd[1]: Started cri-containerd-a588db7f7968a15fd1970fc5a82c9111c868d98058759c7a695dcc380d054906.scope. Jul 10 01:05:47.135006 env[1246]: time="2025-07-10T01:05:47.134972294Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:05:47.135157 env[1246]: time="2025-07-10T01:05:47.135143046Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:05:47.135261 env[1246]: time="2025-07-10T01:05:47.135247799Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:05:47.137047 env[1246]: time="2025-07-10T01:05:47.137017811Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/286b7054d80203d3504f43fc51e690dcbbb584b72c26c3bdc36adbe4ed92627b pid=1834 runtime=io.containerd.runc.v2 Jul 10 01:05:47.141251 systemd[1]: Started cri-containerd-36994ee7c20691b6aa0c560c02f0e838f510122aed250d3960d4892028bec8ea.scope. Jul 10 01:05:47.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit: BPF prog-id=61 op=LOAD Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1796 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135383864623766373936386131356664313937306663356138326339 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1796 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135383864623766373936386131356664313937306663356138326339 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit: BPF prog-id=62 op=LOAD Jul 10 01:05:47.145000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001c6280 items=0 ppid=1796 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135383864623766373936386131356664313937306663356138326339 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit: BPF prog-id=63 op=LOAD Jul 10 01:05:47.145000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001c62c8 items=0 ppid=1796 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135383864623766373936386131356664313937306663356138326339 Jul 10 01:05:47.145000 audit: BPF prog-id=63 op=UNLOAD Jul 10 01:05:47.145000 audit: BPF prog-id=62 op=UNLOAD Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.145000 audit: BPF prog-id=64 op=LOAD Jul 10 01:05:47.145000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0001c66d8 items=0 ppid=1796 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135383864623766373936386131356664313937306663356138326339 Jul 10 01:05:47.159895 systemd[1]: Started cri-containerd-286b7054d80203d3504f43fc51e690dcbbb584b72c26c3bdc36adbe4ed92627b.scope. Jul 10 01:05:47.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.163000 audit: BPF prog-id=65 op=LOAD Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1806 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336393934656537633230363931623661613063353630633032663065 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1806 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336393934656537633230363931623661613063353630633032663065 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit: BPF prog-id=66 op=LOAD Jul 10 01:05:47.164000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000309050 items=0 ppid=1806 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336393934656537633230363931623661613063353630633032663065 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.164000 audit: BPF prog-id=67 op=LOAD Jul 10 01:05:47.164000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000309098 items=0 ppid=1806 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336393934656537633230363931623661613063353630633032663065 Jul 10 01:05:47.165000 audit: BPF prog-id=67 op=UNLOAD Jul 10 01:05:47.165000 audit: BPF prog-id=66 op=UNLOAD Jul 10 01:05:47.165000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.165000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.165000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.165000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.165000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.165000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.165000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.165000 audit[1819]: AVC avc: denied { perfmon } for pid=1819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.165000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.165000 audit[1819]: AVC avc: denied { bpf } for pid=1819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.165000 audit: BPF prog-id=68 op=LOAD Jul 10 01:05:47.165000 audit[1819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003094a8 items=0 ppid=1806 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336393934656537633230363931623661613063353630633032663065 Jul 10 01:05:47.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit: BPF prog-id=69 op=LOAD Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1834 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238366237303534643830323033643335303466343366633531653639 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1834 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238366237303534643830323033643335303466343366633531653639 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit: BPF prog-id=70 op=LOAD Jul 10 01:05:47.171000 audit[1862]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001e3a20 items=0 ppid=1834 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238366237303534643830323033643335303466343366633531653639 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit: BPF prog-id=71 op=LOAD Jul 10 01:05:47.171000 audit[1862]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001e3a68 items=0 ppid=1834 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238366237303534643830323033643335303466343366633531653639 Jul 10 01:05:47.171000 audit: BPF prog-id=71 op=UNLOAD Jul 10 01:05:47.171000 audit: BPF prog-id=70 op=UNLOAD Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.171000 audit: BPF prog-id=72 op=LOAD Jul 10 01:05:47.171000 audit[1862]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0001e3e78 items=0 ppid=1834 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238366237303534643830323033643335303466343366633531653639 Jul 10 01:05:47.192351 env[1246]: time="2025-07-10T01:05:47.192324847Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:795f69a91dc182145837222cdb53e291,Namespace:kube-system,Attempt:0,} returns sandbox id \"286b7054d80203d3504f43fc51e690dcbbb584b72c26c3bdc36adbe4ed92627b\"" Jul 10 01:05:47.193948 env[1246]: time="2025-07-10T01:05:47.193931624Z" level=info msg="CreateContainer within sandbox \"286b7054d80203d3504f43fc51e690dcbbb584b72c26c3bdc36adbe4ed92627b\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 10 01:05:47.196267 env[1246]: time="2025-07-10T01:05:47.196252677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"36994ee7c20691b6aa0c560c02f0e838f510122aed250d3960d4892028bec8ea\"" Jul 10 01:05:47.199797 env[1246]: time="2025-07-10T01:05:47.199775709Z" level=info msg="CreateContainer within sandbox \"36994ee7c20691b6aa0c560c02f0e838f510122aed250d3960d4892028bec8ea\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 10 01:05:47.207335 env[1246]: time="2025-07-10T01:05:47.207313641Z" level=info msg="CreateContainer within sandbox \"36994ee7c20691b6aa0c560c02f0e838f510122aed250d3960d4892028bec8ea\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304\"" Jul 10 01:05:47.207710 env[1246]: time="2025-07-10T01:05:47.207690329Z" level=info msg="StartContainer for \"ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304\"" Jul 10 01:05:47.210703 env[1246]: time="2025-07-10T01:05:47.210681717Z" level=info msg="CreateContainer within sandbox \"286b7054d80203d3504f43fc51e690dcbbb584b72c26c3bdc36adbe4ed92627b\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"f6a6566714fe9d39012503d43351642fb6d60b465e92034f902ab8ff75d3ee41\"" Jul 10 01:05:47.210961 env[1246]: time="2025-07-10T01:05:47.210948833Z" level=info msg="StartContainer for \"f6a6566714fe9d39012503d43351642fb6d60b465e92034f902ab8ff75d3ee41\"" Jul 10 01:05:47.213452 env[1246]: time="2025-07-10T01:05:47.213435435Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"a588db7f7968a15fd1970fc5a82c9111c868d98058759c7a695dcc380d054906\"" Jul 10 01:05:47.214686 env[1246]: time="2025-07-10T01:05:47.214672709Z" level=info msg="CreateContainer within sandbox \"a588db7f7968a15fd1970fc5a82c9111c868d98058759c7a695dcc380d054906\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 10 01:05:47.218838 env[1246]: time="2025-07-10T01:05:47.218807832Z" level=info msg="CreateContainer within sandbox \"a588db7f7968a15fd1970fc5a82c9111c868d98058759c7a695dcc380d054906\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61\"" Jul 10 01:05:47.219135 env[1246]: time="2025-07-10T01:05:47.219124019Z" level=info msg="StartContainer for \"5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61\"" Jul 10 01:05:47.224760 systemd[1]: Started cri-containerd-f6a6566714fe9d39012503d43351642fb6d60b465e92034f902ab8ff75d3ee41.scope. Jul 10 01:05:47.232476 systemd[1]: Started cri-containerd-ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304.scope. Jul 10 01:05:47.235295 systemd[1]: Started cri-containerd-5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61.scope. Jul 10 01:05:47.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit: BPF prog-id=73 op=LOAD Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1834 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636613635363637313466653964333930313235303364343333353136 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1834 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636613635363637313466653964333930313235303364343333353136 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit: BPF prog-id=74 op=LOAD Jul 10 01:05:47.243000 audit[1927]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002927c0 items=0 ppid=1834 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636613635363637313466653964333930313235303364343333353136 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit: BPF prog-id=75 op=LOAD Jul 10 01:05:47.243000 audit[1927]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000292808 items=0 ppid=1834 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636613635363637313466653964333930313235303364343333353136 Jul 10 01:05:47.243000 audit: BPF prog-id=75 op=UNLOAD Jul 10 01:05:47.243000 audit: BPF prog-id=74 op=UNLOAD Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.243000 audit: BPF prog-id=76 op=LOAD Jul 10 01:05:47.243000 audit[1927]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000292c18 items=0 ppid=1834 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636613635363637313466653964333930313235303364343333353136 Jul 10 01:05:47.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.248000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.248000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.248000 audit: BPF prog-id=77 op=LOAD Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1796 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564346630633230626561666234616535313937633135353739363632 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1796 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564346630633230626561666234616535313937633135353739363632 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit: BPF prog-id=78 op=LOAD Jul 10 01:05:47.249000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000387eb0 items=0 ppid=1796 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564346630633230626561666234616535313937633135353739363632 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit: BPF prog-id=79 op=LOAD Jul 10 01:05:47.249000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000387ef8 items=0 ppid=1796 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564346630633230626561666234616535313937633135353739363632 Jul 10 01:05:47.249000 audit: BPF prog-id=79 op=UNLOAD Jul 10 01:05:47.249000 audit: BPF prog-id=78 op=UNLOAD Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.249000 audit: BPF prog-id=80 op=LOAD Jul 10 01:05:47.249000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003f6308 items=0 ppid=1796 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.249000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564346630633230626561666234616535313937633135353739363632 Jul 10 01:05:47.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.262000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit: BPF prog-id=81 op=LOAD Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1806 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561373066393763623465373163666139356339343264373832633536 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1806 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561373066393763623465373163666139356339343264373832633536 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.263000 audit: BPF prog-id=82 op=LOAD Jul 10 01:05:47.263000 audit[1926]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000334610 items=0 ppid=1806 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.263000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561373066393763623465373163666139356339343264373832633536 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit: BPF prog-id=83 op=LOAD Jul 10 01:05:47.264000 audit[1926]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000334658 items=0 ppid=1806 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561373066393763623465373163666139356339343264373832633536 Jul 10 01:05:47.264000 audit: BPF prog-id=83 op=UNLOAD Jul 10 01:05:47.264000 audit: BPF prog-id=82 op=UNLOAD Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:47.264000 audit: BPF prog-id=84 op=LOAD Jul 10 01:05:47.264000 audit[1926]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000334a68 items=0 ppid=1806 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:47.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561373066393763623465373163666139356339343264373832633536 Jul 10 01:05:47.279312 env[1246]: time="2025-07-10T01:05:47.279290163Z" level=info msg="StartContainer for \"5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61\" returns successfully" Jul 10 01:05:47.291549 env[1246]: time="2025-07-10T01:05:47.291527127Z" level=info msg="StartContainer for \"f6a6566714fe9d39012503d43351642fb6d60b465e92034f902ab8ff75d3ee41\" returns successfully" Jul 10 01:05:47.294935 env[1246]: time="2025-07-10T01:05:47.294917027Z" level=info msg="StartContainer for \"ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304\" returns successfully" Jul 10 01:05:47.403942 kubelet[1746]: W0710 01:05:47.403903 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://139.178.70.108:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 139.178.70.108:6443: connect: connection refused Jul 10 01:05:47.404056 kubelet[1746]: E0710 01:05:47.403946 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://139.178.70.108:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" Jul 10 01:05:47.412514 kubelet[1746]: W0710 01:05:47.412489 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://139.178.70.108:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 139.178.70.108:6443: connect: connection refused Jul 10 01:05:47.412566 kubelet[1746]: E0710 01:05:47.412517 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://139.178.70.108:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" Jul 10 01:05:47.424988 kubelet[1746]: W0710 01:05:47.424945 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://139.178.70.108:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 139.178.70.108:6443: connect: connection refused Jul 10 01:05:47.424988 kubelet[1746]: E0710 01:05:47.424974 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://139.178.70.108:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" Jul 10 01:05:47.568209 kubelet[1746]: E0710 01:05:47.568165 1746 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.108:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.108:6443: connect: connection refused" interval="1.6s" Jul 10 01:05:47.578619 kubelet[1746]: W0710 01:05:47.578559 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://139.178.70.108:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 139.178.70.108:6443: connect: connection refused Jul 10 01:05:47.578619 kubelet[1746]: E0710 01:05:47.578599 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://139.178.70.108:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" Jul 10 01:05:47.790556 kubelet[1746]: I0710 01:05:47.790333 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 01:05:47.790556 kubelet[1746]: E0710 01:05:47.790538 1746 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.108:6443/api/v1/nodes\": dial tcp 139.178.70.108:6443: connect: connection refused" node="localhost" Jul 10 01:05:48.138652 kubelet[1746]: E0710 01:05:48.138629 1746 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://139.178.70.108:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" Jul 10 01:05:48.257000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:48.257000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0008f4000 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:05:48.257000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:05:48.257000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:48.257000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0008e6040 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:05:48.257000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:05:48.971000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:48.971000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:48.971000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003fe8210 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:05:48.971000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:05:48.971000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c003f15e60 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:05:48.971000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:05:48.977000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:48.977000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0033ac450 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:05:48.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:05:48.977000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:48.977000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c006d292a0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:05:48.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:05:48.984000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:48.984000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c006c9fa40 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:05:48.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:05:48.984000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:48.984000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4c a1=c003fe9680 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:05:48.984000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:05:49.170368 kubelet[1746]: E0710 01:05:49.170341 1746 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 10 01:05:49.371656 kubelet[1746]: E0710 01:05:49.371637 1746 csi_plugin.go:305] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "localhost" not found Jul 10 01:05:49.391674 kubelet[1746]: I0710 01:05:49.391656 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 01:05:49.401056 kubelet[1746]: I0710 01:05:49.401033 1746 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 10 01:05:49.401056 kubelet[1746]: E0710 01:05:49.401058 1746 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 10 01:05:49.409321 kubelet[1746]: E0710 01:05:49.409296 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:49.510143 kubelet[1746]: E0710 01:05:49.510108 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:49.610737 kubelet[1746]: E0710 01:05:49.610709 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:49.711289 kubelet[1746]: E0710 01:05:49.711220 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:49.811886 kubelet[1746]: E0710 01:05:49.811863 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:49.912632 kubelet[1746]: E0710 01:05:49.912602 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:50.013914 kubelet[1746]: E0710 01:05:50.013837 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:50.114589 kubelet[1746]: E0710 01:05:50.114563 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:50.214779 kubelet[1746]: E0710 01:05:50.214757 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:05:50.997041 kubelet[1746]: I0710 01:05:50.997016 1746 apiserver.go:52] "Watching apiserver" Jul 10 01:05:51.024363 kubelet[1746]: I0710 01:05:51.024331 1746 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 10 01:05:51.245904 systemd[1]: Reloading. Jul 10 01:05:51.303367 /usr/lib/systemd/system-generators/torcx-generator[2043]: time="2025-07-10T01:05:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 01:05:51.303619 /usr/lib/systemd/system-generators/torcx-generator[2043]: time="2025-07-10T01:05:51Z" level=info msg="torcx already run" Jul 10 01:05:51.370620 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 01:05:51.370753 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 01:05:51.383152 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 01:05:51.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.437654 kernel: kauditd_printk_skb: 405 callbacks suppressed Jul 10 01:05:51.437704 kernel: audit: type=1400 audit(1752109551.435:569): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.442476 kernel: audit: type=1400 audit(1752109551.435:570): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.445069 kernel: audit: type=1400 audit(1752109551.435:571): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.447692 kernel: audit: type=1400 audit(1752109551.435:572): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.447728 kernel: audit: type=1400 audit(1752109551.435:573): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.452518 kernel: audit: type=1400 audit(1752109551.435:574): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.452562 kernel: audit: type=1400 audit(1752109551.435:575): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.457361 kernel: audit: type=1400 audit(1752109551.435:576): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.457393 kernel: audit: type=1400 audit(1752109551.435:577): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462175 kernel: audit: type=1400 audit(1752109551.438:578): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.438000 audit: BPF prog-id=85 op=LOAD Jul 10 01:05:51.439000 audit: BPF prog-id=69 op=UNLOAD Jul 10 01:05:51.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.441000 audit: BPF prog-id=86 op=LOAD Jul 10 01:05:51.441000 audit: BPF prog-id=46 op=UNLOAD Jul 10 01:05:51.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.442000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.442000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.443000 audit: BPF prog-id=87 op=LOAD Jul 10 01:05:51.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.444000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.444000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.448000 audit: BPF prog-id=88 op=LOAD Jul 10 01:05:51.448000 audit: BPF prog-id=47 op=UNLOAD Jul 10 01:05:51.448000 audit: BPF prog-id=48 op=UNLOAD Jul 10 01:05:51.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.453000 audit: BPF prog-id=89 op=LOAD Jul 10 01:05:51.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.458000 audit: BPF prog-id=90 op=LOAD Jul 10 01:05:51.458000 audit: BPF prog-id=49 op=UNLOAD Jul 10 01:05:51.458000 audit: BPF prog-id=50 op=UNLOAD Jul 10 01:05:51.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit: BPF prog-id=65 op=UNLOAD Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit: BPF prog-id=92 op=LOAD Jul 10 01:05:51.461000 audit: BPF prog-id=51 op=UNLOAD Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit: BPF prog-id=52 op=UNLOAD Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit: BPF prog-id=53 op=UNLOAD Jul 10 01:05:51.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.462000 audit: BPF prog-id=96 op=LOAD Jul 10 01:05:51.462000 audit: BPF prog-id=77 op=UNLOAD Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit: BPF prog-id=97 op=LOAD Jul 10 01:05:51.463000 audit: BPF prog-id=55 op=UNLOAD Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit: BPF prog-id=98 op=LOAD Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.463000 audit: BPF prog-id=99 op=LOAD Jul 10 01:05:51.463000 audit: BPF prog-id=56 op=UNLOAD Jul 10 01:05:51.463000 audit: BPF prog-id=57 op=UNLOAD Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit: BPF prog-id=100 op=LOAD Jul 10 01:05:51.464000 audit: BPF prog-id=61 op=UNLOAD Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.464000 audit: BPF prog-id=101 op=LOAD Jul 10 01:05:51.464000 audit: BPF prog-id=58 op=UNLOAD Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit: BPF prog-id=102 op=LOAD Jul 10 01:05:51.465000 audit: BPF prog-id=81 op=UNLOAD Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit: BPF prog-id=103 op=LOAD Jul 10 01:05:51.465000 audit: BPF prog-id=73 op=UNLOAD Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.465000 audit: BPF prog-id=104 op=LOAD Jul 10 01:05:51.465000 audit: BPF prog-id=59 op=UNLOAD Jul 10 01:05:51.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:51.466000 audit: BPF prog-id=105 op=LOAD Jul 10 01:05:51.466000 audit: BPF prog-id=60 op=UNLOAD Jul 10 01:05:51.477691 systemd[1]: Stopping kubelet.service... Jul 10 01:05:51.494498 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 01:05:51.494616 systemd[1]: Stopped kubelet.service. Jul 10 01:05:51.493000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:51.496359 systemd[1]: Starting kubelet.service... Jul 10 01:05:52.557000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:52.557000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0008e6340 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:05:52.557000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:05:52.557000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:52.557000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0008e6500 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:05:52.557000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:05:52.559000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:52.559000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0008e66c0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:05:52.559000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:05:52.560000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:05:52.560000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000d83d40 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:05:52.560000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:05:52.564000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7350 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:05:52.564000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000d30680 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:05:52.564000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:05:52.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:52.917233 systemd[1]: Started kubelet.service. Jul 10 01:05:52.986314 kubelet[2106]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 01:05:52.986314 kubelet[2106]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 10 01:05:52.986314 kubelet[2106]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 01:05:52.986595 kubelet[2106]: I0710 01:05:52.986515 2106 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 01:05:53.001089 kubelet[2106]: I0710 01:05:53.001058 2106 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 10 01:05:53.001089 kubelet[2106]: I0710 01:05:53.001085 2106 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 01:05:53.002015 kubelet[2106]: I0710 01:05:53.002003 2106 server.go:934] "Client rotation is on, will bootstrap in background" Jul 10 01:05:53.004252 kubelet[2106]: I0710 01:05:53.004238 2106 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 10 01:05:53.023303 kubelet[2106]: I0710 01:05:53.023277 2106 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 01:05:53.025757 kubelet[2106]: E0710 01:05:53.025736 2106 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 01:05:53.025757 kubelet[2106]: I0710 01:05:53.025754 2106 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 01:05:53.028253 kubelet[2106]: I0710 01:05:53.028236 2106 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 01:05:53.028425 kubelet[2106]: I0710 01:05:53.028417 2106 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 10 01:05:53.028548 kubelet[2106]: I0710 01:05:53.028532 2106 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 01:05:53.028794 kubelet[2106]: I0710 01:05:53.028589 2106 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 01:05:53.028897 kubelet[2106]: I0710 01:05:53.028880 2106 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 01:05:53.028897 kubelet[2106]: I0710 01:05:53.028896 2106 container_manager_linux.go:300] "Creating device plugin manager" Jul 10 01:05:53.028952 kubelet[2106]: I0710 01:05:53.028915 2106 state_mem.go:36] "Initialized new in-memory state store" Jul 10 01:05:53.028972 kubelet[2106]: I0710 01:05:53.028968 2106 kubelet.go:408] "Attempting to sync node with API server" Jul 10 01:05:53.028990 kubelet[2106]: I0710 01:05:53.028976 2106 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 01:05:53.029087 kubelet[2106]: I0710 01:05:53.028993 2106 kubelet.go:314] "Adding apiserver pod source" Jul 10 01:05:53.029087 kubelet[2106]: I0710 01:05:53.028999 2106 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 01:05:53.034628 kubelet[2106]: I0710 01:05:53.032228 2106 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 01:05:53.034628 kubelet[2106]: I0710 01:05:53.033024 2106 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 01:05:53.034628 kubelet[2106]: I0710 01:05:53.033250 2106 server.go:1274] "Started kubelet" Jul 10 01:05:53.057364 kubelet[2106]: I0710 01:05:53.052535 2106 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 01:05:53.057364 kubelet[2106]: I0710 01:05:53.052728 2106 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 01:05:53.057364 kubelet[2106]: I0710 01:05:53.052780 2106 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 01:05:53.057364 kubelet[2106]: I0710 01:05:53.053489 2106 server.go:449] "Adding debug handlers to kubelet server" Jul 10 01:05:53.058000 audit[2106]: AVC avc: denied { mac_admin } for pid=2106 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:53.058000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:05:53.058000 audit[2106]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000059e90 a1=c000703bd8 a2=c000059e30 a3=25 items=0 ppid=1 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:53.058000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:05:53.058000 audit[2106]: AVC avc: denied { mac_admin } for pid=2106 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:53.058000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:05:53.058000 audit[2106]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0004096e0 a1=c000703bf0 a2=c000bd4000 a3=25 items=0 ppid=1 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:53.058000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:05:53.059750 kubelet[2106]: I0710 01:05:53.059538 2106 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 01:05:53.059750 kubelet[2106]: I0710 01:05:53.059567 2106 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 10 01:05:53.059750 kubelet[2106]: I0710 01:05:53.059594 2106 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 01:05:53.061266 kubelet[2106]: I0710 01:05:53.061250 2106 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 01:05:53.063358 kubelet[2106]: I0710 01:05:53.063344 2106 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 10 01:05:53.068565 kubelet[2106]: I0710 01:05:53.068406 2106 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 10 01:05:53.069673 kubelet[2106]: I0710 01:05:53.069660 2106 reconciler.go:26] "Reconciler: start to sync state" Jul 10 01:05:53.070306 kubelet[2106]: E0710 01:05:53.069894 2106 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 01:05:53.073557 kubelet[2106]: I0710 01:05:53.072495 2106 factory.go:221] Registration of the containerd container factory successfully Jul 10 01:05:53.073557 kubelet[2106]: I0710 01:05:53.073302 2106 factory.go:221] Registration of the systemd container factory successfully Jul 10 01:05:53.073557 kubelet[2106]: I0710 01:05:53.073446 2106 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 01:05:53.082575 kubelet[2106]: I0710 01:05:53.082549 2106 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 01:05:53.098782 kubelet[2106]: I0710 01:05:53.098752 2106 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 01:05:53.098919 kubelet[2106]: I0710 01:05:53.098910 2106 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 10 01:05:53.101728 kubelet[2106]: I0710 01:05:53.101711 2106 kubelet.go:2321] "Starting kubelet main sync loop" Jul 10 01:05:53.101930 kubelet[2106]: E0710 01:05:53.101911 2106 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 01:05:53.115967 kubelet[2106]: I0710 01:05:53.115951 2106 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 10 01:05:53.116072 kubelet[2106]: I0710 01:05:53.116058 2106 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 10 01:05:53.116122 kubelet[2106]: I0710 01:05:53.116115 2106 state_mem.go:36] "Initialized new in-memory state store" Jul 10 01:05:53.116280 kubelet[2106]: I0710 01:05:53.116271 2106 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 10 01:05:53.116339 kubelet[2106]: I0710 01:05:53.116322 2106 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 10 01:05:53.116387 kubelet[2106]: I0710 01:05:53.116380 2106 policy_none.go:49] "None policy: Start" Jul 10 01:05:53.116700 kubelet[2106]: I0710 01:05:53.116692 2106 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 10 01:05:53.116748 kubelet[2106]: I0710 01:05:53.116740 2106 state_mem.go:35] "Initializing new in-memory state store" Jul 10 01:05:53.116862 kubelet[2106]: I0710 01:05:53.116855 2106 state_mem.go:75] "Updated machine memory state" Jul 10 01:05:53.119948 kubelet[2106]: I0710 01:05:53.119935 2106 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 01:05:53.118000 audit[2106]: AVC avc: denied { mac_admin } for pid=2106 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:53.118000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:05:53.118000 audit[2106]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000f7d200 a1=c0006564c8 a2=c000f7d1d0 a3=25 items=0 ppid=1 pid=2106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:53.118000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:05:53.120301 kubelet[2106]: I0710 01:05:53.120291 2106 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 01:05:53.120427 kubelet[2106]: I0710 01:05:53.120420 2106 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 01:05:53.120487 kubelet[2106]: I0710 01:05:53.120466 2106 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 01:05:53.120875 kubelet[2106]: I0710 01:05:53.120867 2106 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 01:05:53.227244 kubelet[2106]: I0710 01:05:53.225434 2106 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 01:05:53.236666 kubelet[2106]: I0710 01:05:53.236649 2106 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 10 01:05:53.236855 kubelet[2106]: I0710 01:05:53.236846 2106 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 10 01:05:53.372160 kubelet[2106]: I0710 01:05:53.372141 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/795f69a91dc182145837222cdb53e291-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"795f69a91dc182145837222cdb53e291\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:05:53.372316 kubelet[2106]: I0710 01:05:53.372301 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/795f69a91dc182145837222cdb53e291-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"795f69a91dc182145837222cdb53e291\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:05:53.372382 kubelet[2106]: I0710 01:05:53.372372 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:05:53.372439 kubelet[2106]: I0710 01:05:53.372429 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:05:53.372500 kubelet[2106]: I0710 01:05:53.372491 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:05:53.372556 kubelet[2106]: I0710 01:05:53.372547 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 10 01:05:53.372615 kubelet[2106]: I0710 01:05:53.372606 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/795f69a91dc182145837222cdb53e291-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"795f69a91dc182145837222cdb53e291\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:05:53.372814 kubelet[2106]: I0710 01:05:53.372804 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:05:53.372875 kubelet[2106]: I0710 01:05:53.372866 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:05:54.031547 kubelet[2106]: I0710 01:05:54.031493 2106 apiserver.go:52] "Watching apiserver" Jul 10 01:05:54.068818 kubelet[2106]: I0710 01:05:54.068794 2106 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 10 01:05:54.115623 kubelet[2106]: E0710 01:05:54.115596 2106 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 10 01:05:54.133404 kubelet[2106]: I0710 01:05:54.133368 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.133342848 podStartE2EDuration="1.133342848s" podCreationTimestamp="2025-07-10 01:05:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:05:54.128536524 +0000 UTC m=+1.187486818" watchObservedRunningTime="2025-07-10 01:05:54.133342848 +0000 UTC m=+1.192293142" Jul 10 01:05:54.141033 kubelet[2106]: I0710 01:05:54.140990 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.1409774 podStartE2EDuration="1.1409774s" podCreationTimestamp="2025-07-10 01:05:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:05:54.133895435 +0000 UTC m=+1.192845730" watchObservedRunningTime="2025-07-10 01:05:54.1409774 +0000 UTC m=+1.199927691" Jul 10 01:05:54.148182 kubelet[2106]: I0710 01:05:54.148146 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.148134222 podStartE2EDuration="1.148134222s" podCreationTimestamp="2025-07-10 01:05:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:05:54.141257991 +0000 UTC m=+1.200208268" watchObservedRunningTime="2025-07-10 01:05:54.148134222 +0000 UTC m=+1.207084511" Jul 10 01:05:57.309809 kubelet[2106]: I0710 01:05:57.309782 2106 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 10 01:05:57.310328 env[1246]: time="2025-07-10T01:05:57.310263361Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 10 01:05:57.310845 kubelet[2106]: I0710 01:05:57.310833 2106 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 10 01:05:58.072662 systemd[1]: Created slice kubepods-besteffort-poddd4f2b5e_eb00_4ec1_a7b3_da44862a8a95.slice. Jul 10 01:05:58.104344 kubelet[2106]: I0710 01:05:58.104317 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/dd4f2b5e-eb00-4ec1-a7b3-da44862a8a95-kube-proxy\") pod \"kube-proxy-7dp8n\" (UID: \"dd4f2b5e-eb00-4ec1-a7b3-da44862a8a95\") " pod="kube-system/kube-proxy-7dp8n" Jul 10 01:05:58.104521 kubelet[2106]: I0710 01:05:58.104511 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dd4f2b5e-eb00-4ec1-a7b3-da44862a8a95-xtables-lock\") pod \"kube-proxy-7dp8n\" (UID: \"dd4f2b5e-eb00-4ec1-a7b3-da44862a8a95\") " pod="kube-system/kube-proxy-7dp8n" Jul 10 01:05:58.104616 kubelet[2106]: I0710 01:05:58.104604 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dd4f2b5e-eb00-4ec1-a7b3-da44862a8a95-lib-modules\") pod \"kube-proxy-7dp8n\" (UID: \"dd4f2b5e-eb00-4ec1-a7b3-da44862a8a95\") " pod="kube-system/kube-proxy-7dp8n" Jul 10 01:05:58.104711 kubelet[2106]: I0710 01:05:58.104696 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vfvx7\" (UniqueName: \"kubernetes.io/projected/dd4f2b5e-eb00-4ec1-a7b3-da44862a8a95-kube-api-access-vfvx7\") pod \"kube-proxy-7dp8n\" (UID: \"dd4f2b5e-eb00-4ec1-a7b3-da44862a8a95\") " pod="kube-system/kube-proxy-7dp8n" Jul 10 01:05:58.249458 systemd[1]: Created slice kubepods-besteffort-podb67a7777_48fb_4ae9_8f99_799120f113c4.slice. Jul 10 01:05:58.254995 kubelet[2106]: I0710 01:05:58.254971 2106 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 10 01:05:58.306282 kubelet[2106]: I0710 01:05:58.306259 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-slj5k\" (UniqueName: \"kubernetes.io/projected/b67a7777-48fb-4ae9-8f99-799120f113c4-kube-api-access-slj5k\") pod \"tigera-operator-5bf8dfcb4-cdnlq\" (UID: \"b67a7777-48fb-4ae9-8f99-799120f113c4\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-cdnlq" Jul 10 01:05:58.306426 kubelet[2106]: I0710 01:05:58.306414 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b67a7777-48fb-4ae9-8f99-799120f113c4-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-cdnlq\" (UID: \"b67a7777-48fb-4ae9-8f99-799120f113c4\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-cdnlq" Jul 10 01:05:58.379694 env[1246]: time="2025-07-10T01:05:58.379066252Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-7dp8n,Uid:dd4f2b5e-eb00-4ec1-a7b3-da44862a8a95,Namespace:kube-system,Attempt:0,}" Jul 10 01:05:58.391534 env[1246]: time="2025-07-10T01:05:58.391474712Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:05:58.391653 env[1246]: time="2025-07-10T01:05:58.391520023Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:05:58.391653 env[1246]: time="2025-07-10T01:05:58.391532352Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:05:58.391876 env[1246]: time="2025-07-10T01:05:58.391845223Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/888bddd0da27cd00f65f5bb4dc1e7288cae2a08a2e4c38f996bf16da0259d063 pid=2158 runtime=io.containerd.runc.v2 Jul 10 01:05:58.410463 systemd[1]: Started cri-containerd-888bddd0da27cd00f65f5bb4dc1e7288cae2a08a2e4c38f996bf16da0259d063.scope. Jul 10 01:05:58.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.422751 kernel: kauditd_printk_skb: 313 callbacks suppressed Jul 10 01:05:58.422883 kernel: audit: type=1400 audit(1752109558.420:798): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.427429 kernel: audit: type=1400 audit(1752109558.420:799): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.427457 kernel: audit: type=1400 audit(1752109558.420:800): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.432360 kernel: audit: type=1400 audit(1752109558.420:801): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.435382 kernel: audit: type=1400 audit(1752109558.420:802): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.435414 kernel: audit: type=1400 audit(1752109558.420:803): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.440465 kernel: audit: type=1400 audit(1752109558.420:804): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.440502 kernel: audit: type=1400 audit(1752109558.420:805): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.420000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.445890 kernel: audit: type=1400 audit(1752109558.420:806): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.445940 kernel: audit: type=1400 audit(1752109558.420:807): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.420000 audit: BPF prog-id=106 op=LOAD Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2158 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838386264646430646132376364303066363566356262346463316537 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2158 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838386264646430646132376364303066363566356262346463316537 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.421000 audit: BPF prog-id=107 op=LOAD Jul 10 01:05:58.421000 audit[2168]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000fdd80 items=0 ppid=2158 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.421000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838386264646430646132376364303066363566356262346463316537 Jul 10 01:05:58.423000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.423000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.423000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.423000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.423000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.423000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.423000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.423000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.423000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.423000 audit: BPF prog-id=108 op=LOAD Jul 10 01:05:58.423000 audit[2168]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000fddc8 items=0 ppid=2158 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838386264646430646132376364303066363566356262346463316537 Jul 10 01:05:58.428000 audit: BPF prog-id=108 op=UNLOAD Jul 10 01:05:58.428000 audit: BPF prog-id=107 op=UNLOAD Jul 10 01:05:58.428000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.428000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.428000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.428000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.428000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.428000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.428000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.428000 audit[2168]: AVC avc: denied { perfmon } for pid=2168 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.428000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.428000 audit[2168]: AVC avc: denied { bpf } for pid=2168 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.428000 audit: BPF prog-id=109 op=LOAD Jul 10 01:05:58.428000 audit[2168]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003d81d8 items=0 ppid=2158 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838386264646430646132376364303066363566356262346463316537 Jul 10 01:05:58.450773 env[1246]: time="2025-07-10T01:05:58.450752483Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-7dp8n,Uid:dd4f2b5e-eb00-4ec1-a7b3-da44862a8a95,Namespace:kube-system,Attempt:0,} returns sandbox id \"888bddd0da27cd00f65f5bb4dc1e7288cae2a08a2e4c38f996bf16da0259d063\"" Jul 10 01:05:58.453349 env[1246]: time="2025-07-10T01:05:58.453328072Z" level=info msg="CreateContainer within sandbox \"888bddd0da27cd00f65f5bb4dc1e7288cae2a08a2e4c38f996bf16da0259d063\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 10 01:05:58.476318 env[1246]: time="2025-07-10T01:05:58.476283404Z" level=info msg="CreateContainer within sandbox \"888bddd0da27cd00f65f5bb4dc1e7288cae2a08a2e4c38f996bf16da0259d063\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"24bc0a78c439f65c4278ee92ff504f3aacb00e85a90ef14284898fe03ba66471\"" Jul 10 01:05:58.476960 env[1246]: time="2025-07-10T01:05:58.476930273Z" level=info msg="StartContainer for \"24bc0a78c439f65c4278ee92ff504f3aacb00e85a90ef14284898fe03ba66471\"" Jul 10 01:05:58.491481 systemd[1]: Started cri-containerd-24bc0a78c439f65c4278ee92ff504f3aacb00e85a90ef14284898fe03ba66471.scope. Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7f094c054968 items=0 ppid=2158 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234626330613738633433396636356334323738656539326666353034 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit: BPF prog-id=110 op=LOAD Jul 10 01:05:58.502000 audit[2200]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c0002367c8 items=0 ppid=2158 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234626330613738633433396636356334323738656539326666353034 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit: BPF prog-id=111 op=LOAD Jul 10 01:05:58.502000 audit[2200]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c000236818 items=0 ppid=2158 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234626330613738633433396636356334323738656539326666353034 Jul 10 01:05:58.502000 audit: BPF prog-id=111 op=UNLOAD Jul 10 01:05:58.502000 audit: BPF prog-id=110 op=UNLOAD Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { perfmon } for pid=2200 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit[2200]: AVC avc: denied { bpf } for pid=2200 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.502000 audit: BPF prog-id=112 op=LOAD Jul 10 01:05:58.502000 audit[2200]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c0002368a8 items=0 ppid=2158 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234626330613738633433396636356334323738656539326666353034 Jul 10 01:05:58.515092 env[1246]: time="2025-07-10T01:05:58.515059776Z" level=info msg="StartContainer for \"24bc0a78c439f65c4278ee92ff504f3aacb00e85a90ef14284898fe03ba66471\" returns successfully" Jul 10 01:05:58.553741 env[1246]: time="2025-07-10T01:05:58.553712099Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-cdnlq,Uid:b67a7777-48fb-4ae9-8f99-799120f113c4,Namespace:tigera-operator,Attempt:0,}" Jul 10 01:05:58.562546 env[1246]: time="2025-07-10T01:05:58.562484464Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:05:58.562690 env[1246]: time="2025-07-10T01:05:58.562530404Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:05:58.562690 env[1246]: time="2025-07-10T01:05:58.562550302Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:05:58.562801 env[1246]: time="2025-07-10T01:05:58.562708271Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79 pid=2230 runtime=io.containerd.runc.v2 Jul 10 01:05:58.571340 systemd[1]: Started cri-containerd-ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79.scope. Jul 10 01:05:58.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.582000 audit: BPF prog-id=113 op=LOAD Jul 10 01:05:58.582000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.582000 audit[2239]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=2230 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164386161336431653031626435653634323638646665396137333062 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=c items=0 ppid=2230 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164386161336431653031626435653634323638646665396137333062 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit: BPF prog-id=114 op=LOAD Jul 10 01:05:58.583000 audit[2239]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c00025fce0 items=0 ppid=2230 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164386161336431653031626435653634323638646665396137333062 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.583000 audit: BPF prog-id=115 op=LOAD Jul 10 01:05:58.583000 audit[2239]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c00025fd28 items=0 ppid=2230 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164386161336431653031626435653634323638646665396137333062 Jul 10 01:05:58.583000 audit: BPF prog-id=115 op=UNLOAD Jul 10 01:05:58.584000 audit: BPF prog-id=114 op=UNLOAD Jul 10 01:05:58.584000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.584000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.584000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.584000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.584000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.584000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.584000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.584000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.584000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.584000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:05:58.584000 audit: BPF prog-id=116 op=LOAD Jul 10 01:05:58.584000 audit[2239]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0003e0138 items=0 ppid=2230 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:58.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6164386161336431653031626435653634323638646665396137333062 Jul 10 01:05:58.605180 env[1246]: time="2025-07-10T01:05:58.605157640Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-cdnlq,Uid:b67a7777-48fb-4ae9-8f99-799120f113c4,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79\"" Jul 10 01:05:58.608253 env[1246]: time="2025-07-10T01:05:58.608230476Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 10 01:05:59.134757 kubelet[2106]: I0710 01:05:59.134717 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-7dp8n" podStartSLOduration=1.134703868 podStartE2EDuration="1.134703868s" podCreationTimestamp="2025-07-10 01:05:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:05:59.127891918 +0000 UTC m=+6.186842209" watchObservedRunningTime="2025-07-10 01:05:59.134703868 +0000 UTC m=+6.193654149" Jul 10 01:05:59.315860 systemd[1]: run-containerd-runc-k8s.io-888bddd0da27cd00f65f5bb4dc1e7288cae2a08a2e4c38f996bf16da0259d063-runc.wTQNWU.mount: Deactivated successfully. Jul 10 01:05:59.492000 audit[2301]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.492000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffecac258b0 a2=0 a3=7ffecac2589c items=0 ppid=2209 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.492000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 01:05:59.493000 audit[2302]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.493000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffddd261100 a2=0 a3=7ffddd2610ec items=0 ppid=2209 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.493000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 01:05:59.493000 audit[2303]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2303 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.493000 audit[2303]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff56d0ebe0 a2=0 a3=7fff56d0ebcc items=0 ppid=2209 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.493000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 01:05:59.494000 audit[2304]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.494000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc7211fb90 a2=0 a3=7ffc7211fb7c items=0 ppid=2209 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.494000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 01:05:59.494000 audit[2305]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.494000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff4b47a7f0 a2=0 a3=7fff4b47a7dc items=0 ppid=2209 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.494000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 01:05:59.495000 audit[2306]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.495000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffffb576310 a2=0 a3=7ffffb5762fc items=0 ppid=2209 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.495000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 01:05:59.618000 audit[2307]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.618000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd795fdc40 a2=0 a3=7ffd795fdc2c items=0 ppid=2209 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.618000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 01:05:59.639000 audit[2309]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.639000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff58bf7360 a2=0 a3=7fff58bf734c items=0 ppid=2209 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.639000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 10 01:05:59.645000 audit[2312]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.645000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffffccaf170 a2=0 a3=7ffffccaf15c items=0 ppid=2209 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.645000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 10 01:05:59.646000 audit[2313]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.646000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff37a7afa0 a2=0 a3=7fff37a7af8c items=0 ppid=2209 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.646000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 01:05:59.648000 audit[2315]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.648000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcf9e90510 a2=0 a3=7ffcf9e904fc items=0 ppid=2209 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.648000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 01:05:59.650000 audit[2316]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.650000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc25ec8b60 a2=0 a3=7ffc25ec8b4c items=0 ppid=2209 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 01:05:59.652000 audit[2318]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.652000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcb13a18f0 a2=0 a3=7ffcb13a18dc items=0 ppid=2209 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.652000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 01:05:59.655000 audit[2321]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.655000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd7f041460 a2=0 a3=7ffd7f04144c items=0 ppid=2209 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.655000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 10 01:05:59.656000 audit[2322]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.656000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe5afb0020 a2=0 a3=7ffe5afb000c items=0 ppid=2209 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.656000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 01:05:59.657000 audit[2324]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.657000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe03299390 a2=0 a3=7ffe0329937c items=0 ppid=2209 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.657000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 01:05:59.658000 audit[2325]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.658000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc2f526260 a2=0 a3=7ffc2f52624c items=0 ppid=2209 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.658000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 01:05:59.659000 audit[2327]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.659000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdfab7d070 a2=0 a3=7ffdfab7d05c items=0 ppid=2209 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.659000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 01:05:59.661000 audit[2330]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.661000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff7f400950 a2=0 a3=7fff7f40093c items=0 ppid=2209 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.661000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 01:05:59.664000 audit[2333]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.664000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd9143aa90 a2=0 a3=7ffd9143aa7c items=0 ppid=2209 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.664000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 01:05:59.664000 audit[2334]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.664000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc2b9d7290 a2=0 a3=7ffc2b9d727c items=0 ppid=2209 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.664000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 01:05:59.669000 audit[2336]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.669000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffdb6950bd0 a2=0 a3=7ffdb6950bbc items=0 ppid=2209 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.669000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 01:05:59.672000 audit[2339]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.672000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe4c72d6c0 a2=0 a3=7ffe4c72d6ac items=0 ppid=2209 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 01:05:59.673000 audit[2340]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.673000 audit[2340]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf257b020 a2=0 a3=7ffcf257b00c items=0 ppid=2209 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.673000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 01:05:59.675000 audit[2342]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:05:59.675000 audit[2342]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc974b2620 a2=0 a3=7ffc974b260c items=0 ppid=2209 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.675000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 01:05:59.697000 audit[2348]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:05:59.697000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffef92f3a60 a2=0 a3=7ffef92f3a4c items=0 ppid=2209 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.697000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:05:59.703000 audit[2348]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:05:59.703000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffef92f3a60 a2=0 a3=7ffef92f3a4c items=0 ppid=2209 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.703000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:05:59.704000 audit[2353]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.704000 audit[2353]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd60a67910 a2=0 a3=7ffd60a678fc items=0 ppid=2209 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.704000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 01:05:59.706000 audit[2355]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.706000 audit[2355]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff98319860 a2=0 a3=7fff9831984c items=0 ppid=2209 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.706000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 10 01:05:59.708000 audit[2358]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.708000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe14e8c1c0 a2=0 a3=7ffe14e8c1ac items=0 ppid=2209 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.708000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 10 01:05:59.709000 audit[2359]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.709000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde84310a0 a2=0 a3=7ffde843108c items=0 ppid=2209 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.709000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 01:05:59.711000 audit[2361]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.711000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc936881c0 a2=0 a3=7ffc936881ac items=0 ppid=2209 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.711000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 01:05:59.712000 audit[2362]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2362 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.712000 audit[2362]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdee90ba10 a2=0 a3=7ffdee90b9fc items=0 ppid=2209 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.712000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 01:05:59.714000 audit[2364]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.714000 audit[2364]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffce731f760 a2=0 a3=7ffce731f74c items=0 ppid=2209 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.714000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 10 01:05:59.716000 audit[2367]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.716000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffeacf40440 a2=0 a3=7ffeacf4042c items=0 ppid=2209 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.716000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 01:05:59.717000 audit[2368]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.717000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8c5a4330 a2=0 a3=7ffd8c5a431c items=0 ppid=2209 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.717000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 01:05:59.718000 audit[2370]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.718000 audit[2370]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff384b2210 a2=0 a3=7fff384b21fc items=0 ppid=2209 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.718000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 01:05:59.719000 audit[2371]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.719000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd0e3c7b40 a2=0 a3=7ffd0e3c7b2c items=0 ppid=2209 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.719000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 01:05:59.721000 audit[2373]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2373 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.721000 audit[2373]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff2e2370d0 a2=0 a3=7fff2e2370bc items=0 ppid=2209 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.721000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 01:05:59.723000 audit[2376]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.723000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc8fb322e0 a2=0 a3=7ffc8fb322cc items=0 ppid=2209 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.723000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 01:05:59.725000 audit[2379]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2379 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.725000 audit[2379]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff953d7210 a2=0 a3=7fff953d71fc items=0 ppid=2209 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.725000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 10 01:05:59.726000 audit[2380]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.726000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffec88fff90 a2=0 a3=7ffec88fff7c items=0 ppid=2209 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.726000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 01:05:59.727000 audit[2382]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.727000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff4bf954c0 a2=0 a3=7fff4bf954ac items=0 ppid=2209 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.727000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 01:05:59.729000 audit[2385]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.729000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffc9c583bb0 a2=0 a3=7ffc9c583b9c items=0 ppid=2209 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 01:05:59.730000 audit[2386]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2386 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.730000 audit[2386]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec1aeb1d0 a2=0 a3=7ffec1aeb1bc items=0 ppid=2209 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.730000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 01:05:59.731000 audit[2388]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2388 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.731000 audit[2388]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd9adde710 a2=0 a3=7ffd9adde6fc items=0 ppid=2209 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.731000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 01:05:59.732000 audit[2389]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2389 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.732000 audit[2389]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd2277b530 a2=0 a3=7ffd2277b51c items=0 ppid=2209 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.732000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 01:05:59.733000 audit[2391]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2391 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.733000 audit[2391]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff1e7d55e0 a2=0 a3=7fff1e7d55cc items=0 ppid=2209 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.733000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 01:05:59.735000 audit[2394]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:05:59.735000 audit[2394]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc41f6d030 a2=0 a3=7ffc41f6d01c items=0 ppid=2209 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.735000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 01:05:59.737000 audit[2396]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 01:05:59.737000 audit[2396]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7fffc91f9e40 a2=0 a3=7fffc91f9e2c items=0 ppid=2209 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.737000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:05:59.738000 audit[2396]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2396 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 01:05:59.738000 audit[2396]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fffc91f9e40 a2=0 a3=7fffc91f9e2c items=0 ppid=2209 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:59.738000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:00.098272 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3051190120.mount: Deactivated successfully. Jul 10 01:06:00.919273 env[1246]: time="2025-07-10T01:06:00.919233297Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:00.920463 env[1246]: time="2025-07-10T01:06:00.920441678Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:00.921839 env[1246]: time="2025-07-10T01:06:00.921813377Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:00.923101 env[1246]: time="2025-07-10T01:06:00.923083806Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:00.923604 env[1246]: time="2025-07-10T01:06:00.923583873Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 10 01:06:00.926613 env[1246]: time="2025-07-10T01:06:00.926283489Z" level=info msg="CreateContainer within sandbox \"ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 10 01:06:00.934147 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3220901408.mount: Deactivated successfully. Jul 10 01:06:00.936241 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3642518957.mount: Deactivated successfully. Jul 10 01:06:00.947659 env[1246]: time="2025-07-10T01:06:00.947613545Z" level=info msg="CreateContainer within sandbox \"ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359\"" Jul 10 01:06:00.948924 env[1246]: time="2025-07-10T01:06:00.948894852Z" level=info msg="StartContainer for \"b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359\"" Jul 10 01:06:00.962071 systemd[1]: Started cri-containerd-b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359.scope. Jul 10 01:06:00.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.976000 audit: BPF prog-id=117 op=LOAD Jul 10 01:06:00.976000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.976000 audit[2404]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2230 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:00.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236663239646134633131393363393362346238663365636266326238 Jul 10 01:06:00.976000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.976000 audit[2404]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2230 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:00.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236663239646134633131393363393362346238663365636266326238 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit: BPF prog-id=118 op=LOAD Jul 10 01:06:00.977000 audit[2404]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003930c0 items=0 ppid=2230 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:00.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236663239646134633131393363393362346238663365636266326238 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.977000 audit: BPF prog-id=119 op=LOAD Jul 10 01:06:00.977000 audit[2404]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000393108 items=0 ppid=2230 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:00.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236663239646134633131393363393362346238663365636266326238 Jul 10 01:06:00.978000 audit: BPF prog-id=119 op=UNLOAD Jul 10 01:06:00.978000 audit: BPF prog-id=118 op=UNLOAD Jul 10 01:06:00.978000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.978000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.978000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.978000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.978000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.978000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.978000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.978000 audit[2404]: AVC avc: denied { perfmon } for pid=2404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.978000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.978000 audit[2404]: AVC avc: denied { bpf } for pid=2404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:00.978000 audit: BPF prog-id=120 op=LOAD Jul 10 01:06:00.978000 audit[2404]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000393518 items=0 ppid=2230 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:00.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236663239646134633131393363393362346238663365636266326238 Jul 10 01:06:00.993807 env[1246]: time="2025-07-10T01:06:00.993781772Z" level=info msg="StartContainer for \"b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359\" returns successfully" Jul 10 01:06:01.134356 kubelet[2106]: I0710 01:06:01.134304 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-cdnlq" podStartSLOduration=0.816919938 podStartE2EDuration="3.134285429s" podCreationTimestamp="2025-07-10 01:05:58 +0000 UTC" firstStartedPulling="2025-07-10 01:05:58.607144798 +0000 UTC m=+5.666095072" lastFinishedPulling="2025-07-10 01:06:00.924510289 +0000 UTC m=+7.983460563" observedRunningTime="2025-07-10 01:06:01.127880325 +0000 UTC m=+8.186830611" watchObservedRunningTime="2025-07-10 01:06:01.134285429 +0000 UTC m=+8.193235709" Jul 10 01:06:07.209166 sudo[1470]: pam_unix(sudo:session): session closed for user root Jul 10 01:06:07.213594 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 10 01:06:07.213655 kernel: audit: type=1106 audit(1752109567.208:909): pid=1470 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:06:07.208000 audit[1470]: USER_END pid=1470 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:06:07.216909 kernel: audit: type=1104 audit(1752109567.208:910): pid=1470 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:06:07.208000 audit[1470]: CRED_DISP pid=1470 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:06:07.221994 sshd[1466]: pam_unix(sshd:session): session closed for user core Jul 10 01:06:07.223000 audit[1466]: USER_END pid=1466 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:06:07.223000 audit[1466]: CRED_DISP pid=1466 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:06:07.231985 kernel: audit: type=1106 audit(1752109567.223:911): pid=1466 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:06:07.232035 kernel: audit: type=1104 audit(1752109567.223:912): pid=1466 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:06:07.234398 systemd[1]: sshd@6-139.178.70.108:22-139.178.68.195:54686.service: Deactivated successfully. Jul 10 01:06:07.234863 systemd[1]: session-9.scope: Deactivated successfully. Jul 10 01:06:07.234949 systemd[1]: session-9.scope: Consumed 3.442s CPU time. Jul 10 01:06:07.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.108:22-139.178.68.195:54686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:06:07.238454 kernel: audit: type=1131 audit(1752109567.233:913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.108:22-139.178.68.195:54686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:06:07.238171 systemd-logind[1238]: Session 9 logged out. Waiting for processes to exit. Jul 10 01:06:07.238854 systemd-logind[1238]: Removed session 9. Jul 10 01:06:08.042000 audit[2479]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:08.042000 audit[2479]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd5b2fbb40 a2=0 a3=7ffd5b2fbb2c items=0 ppid=2209 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:08.049937 kernel: audit: type=1325 audit(1752109568.042:914): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:08.049982 kernel: audit: type=1300 audit(1752109568.042:914): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd5b2fbb40 a2=0 a3=7ffd5b2fbb2c items=0 ppid=2209 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:08.050001 kernel: audit: type=1327 audit(1752109568.042:914): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:08.042000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:08.057000 audit[2479]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:08.057000 audit[2479]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd5b2fbb40 a2=0 a3=0 items=0 ppid=2209 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:08.065084 kernel: audit: type=1325 audit(1752109568.057:915): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:08.065142 kernel: audit: type=1300 audit(1752109568.057:915): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd5b2fbb40 a2=0 a3=0 items=0 ppid=2209 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:08.057000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:08.081000 audit[2481]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2481 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:08.081000 audit[2481]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffda03c2de0 a2=0 a3=7ffda03c2dcc items=0 ppid=2209 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:08.081000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:08.087000 audit[2481]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2481 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:08.087000 audit[2481]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffda03c2de0 a2=0 a3=0 items=0 ppid=2209 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:08.087000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:09.318000 audit[2483]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2483 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:09.318000 audit[2483]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffd9df76b0 a2=0 a3=7fffd9df769c items=0 ppid=2209 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:09.318000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:09.328000 audit[2483]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2483 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:09.328000 audit[2483]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffd9df76b0 a2=0 a3=0 items=0 ppid=2209 pid=2483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:09.328000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:10.018145 systemd[1]: Created slice kubepods-besteffort-podae6d6cb8_adf9_450e_a572_6c9813eadcd2.slice. Jul 10 01:06:10.045000 audit[2486]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:10.045000 audit[2486]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdbd9cd1c0 a2=0 a3=7ffdbd9cd1ac items=0 ppid=2209 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.045000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:10.049000 audit[2486]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:10.049000 audit[2486]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdbd9cd1c0 a2=0 a3=0 items=0 ppid=2209 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.049000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:10.076803 kubelet[2106]: I0710 01:06:10.076777 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ae6d6cb8-adf9-450e-a572-6c9813eadcd2-tigera-ca-bundle\") pod \"calico-typha-67fd5d85f7-klm7w\" (UID: \"ae6d6cb8-adf9-450e-a572-6c9813eadcd2\") " pod="calico-system/calico-typha-67fd5d85f7-klm7w" Jul 10 01:06:10.077185 kubelet[2106]: I0710 01:06:10.077170 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6hnrv\" (UniqueName: \"kubernetes.io/projected/ae6d6cb8-adf9-450e-a572-6c9813eadcd2-kube-api-access-6hnrv\") pod \"calico-typha-67fd5d85f7-klm7w\" (UID: \"ae6d6cb8-adf9-450e-a572-6c9813eadcd2\") " pod="calico-system/calico-typha-67fd5d85f7-klm7w" Jul 10 01:06:10.077303 kubelet[2106]: I0710 01:06:10.077292 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/ae6d6cb8-adf9-450e-a572-6c9813eadcd2-typha-certs\") pod \"calico-typha-67fd5d85f7-klm7w\" (UID: \"ae6d6cb8-adf9-450e-a572-6c9813eadcd2\") " pod="calico-system/calico-typha-67fd5d85f7-klm7w" Jul 10 01:06:10.313922 systemd[1]: Created slice kubepods-besteffort-pod94ee8bfa_ce82_4af6_9437_d9631223511d.slice. Jul 10 01:06:10.323055 env[1246]: time="2025-07-10T01:06:10.322722403Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-67fd5d85f7-klm7w,Uid:ae6d6cb8-adf9-450e-a572-6c9813eadcd2,Namespace:calico-system,Attempt:0,}" Jul 10 01:06:10.332410 env[1246]: time="2025-07-10T01:06:10.332372296Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:10.332532 env[1246]: time="2025-07-10T01:06:10.332517235Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:10.332593 env[1246]: time="2025-07-10T01:06:10.332579692Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:10.332728 env[1246]: time="2025-07-10T01:06:10.332712164Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8502b08a446af21be8fee87dc99504fdd143f74fd191f962cb91846a8d102ae3 pid=2495 runtime=io.containerd.runc.v2 Jul 10 01:06:10.347886 systemd[1]: Started cri-containerd-8502b08a446af21be8fee87dc99504fdd143f74fd191f962cb91846a8d102ae3.scope. Jul 10 01:06:10.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.366000 audit: BPF prog-id=121 op=LOAD Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2495 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835303262303861343436616632316265386665653837646339393530 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2495 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835303262303861343436616632316265386665653837646339393530 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit: BPF prog-id=122 op=LOAD Jul 10 01:06:10.367000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000357fe0 items=0 ppid=2495 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835303262303861343436616632316265386665653837646339393530 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit: BPF prog-id=123 op=LOAD Jul 10 01:06:10.367000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003d6028 items=0 ppid=2495 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835303262303861343436616632316265386665653837646339393530 Jul 10 01:06:10.367000 audit: BPF prog-id=123 op=UNLOAD Jul 10 01:06:10.367000 audit: BPF prog-id=122 op=UNLOAD Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.367000 audit: BPF prog-id=124 op=LOAD Jul 10 01:06:10.367000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003d6438 items=0 ppid=2495 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.367000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835303262303861343436616632316265386665653837646339393530 Jul 10 01:06:10.379433 kubelet[2106]: I0710 01:06:10.379414 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/94ee8bfa-ce82-4af6-9437-d9631223511d-tigera-ca-bundle\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379540 kubelet[2106]: I0710 01:06:10.379444 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/94ee8bfa-ce82-4af6-9437-d9631223511d-var-lib-calico\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379540 kubelet[2106]: I0710 01:06:10.379456 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m9sq4\" (UniqueName: \"kubernetes.io/projected/94ee8bfa-ce82-4af6-9437-d9631223511d-kube-api-access-m9sq4\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379540 kubelet[2106]: I0710 01:06:10.379468 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/94ee8bfa-ce82-4af6-9437-d9631223511d-cni-bin-dir\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379540 kubelet[2106]: I0710 01:06:10.379483 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/94ee8bfa-ce82-4af6-9437-d9631223511d-cni-log-dir\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379540 kubelet[2106]: I0710 01:06:10.379498 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/94ee8bfa-ce82-4af6-9437-d9631223511d-cni-net-dir\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379640 kubelet[2106]: I0710 01:06:10.379523 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/94ee8bfa-ce82-4af6-9437-d9631223511d-var-run-calico\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379640 kubelet[2106]: I0710 01:06:10.379534 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/94ee8bfa-ce82-4af6-9437-d9631223511d-xtables-lock\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379640 kubelet[2106]: I0710 01:06:10.379543 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/94ee8bfa-ce82-4af6-9437-d9631223511d-policysync\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379640 kubelet[2106]: I0710 01:06:10.379552 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/94ee8bfa-ce82-4af6-9437-d9631223511d-lib-modules\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379640 kubelet[2106]: I0710 01:06:10.379561 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/94ee8bfa-ce82-4af6-9437-d9631223511d-node-certs\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.379737 kubelet[2106]: I0710 01:06:10.379569 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/94ee8bfa-ce82-4af6-9437-d9631223511d-flexvol-driver-host\") pod \"calico-node-hqn6v\" (UID: \"94ee8bfa-ce82-4af6-9437-d9631223511d\") " pod="calico-system/calico-node-hqn6v" Jul 10 01:06:10.391597 env[1246]: time="2025-07-10T01:06:10.391574038Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-67fd5d85f7-klm7w,Uid:ae6d6cb8-adf9-450e-a572-6c9813eadcd2,Namespace:calico-system,Attempt:0,} returns sandbox id \"8502b08a446af21be8fee87dc99504fdd143f74fd191f962cb91846a8d102ae3\"" Jul 10 01:06:10.392531 env[1246]: time="2025-07-10T01:06:10.392518524Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 10 01:06:10.481990 kubelet[2106]: E0710 01:06:10.481959 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.481990 kubelet[2106]: W0710 01:06:10.481980 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.482178 kubelet[2106]: E0710 01:06:10.481999 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.482178 kubelet[2106]: E0710 01:06:10.482164 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.482178 kubelet[2106]: W0710 01:06:10.482170 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.482281 kubelet[2106]: E0710 01:06:10.482178 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.482309 kubelet[2106]: E0710 01:06:10.482290 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.482309 kubelet[2106]: W0710 01:06:10.482301 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.482309 kubelet[2106]: E0710 01:06:10.482307 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.482440 kubelet[2106]: E0710 01:06:10.482426 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.482479 kubelet[2106]: W0710 01:06:10.482436 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.482479 kubelet[2106]: E0710 01:06:10.482451 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.482570 kubelet[2106]: E0710 01:06:10.482557 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.482570 kubelet[2106]: W0710 01:06:10.482565 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.482627 kubelet[2106]: E0710 01:06:10.482572 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.482933 kubelet[2106]: E0710 01:06:10.482919 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.482933 kubelet[2106]: W0710 01:06:10.482930 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.483050 kubelet[2106]: E0710 01:06:10.482940 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.485121 kubelet[2106]: E0710 01:06:10.485093 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.485121 kubelet[2106]: W0710 01:06:10.485115 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.485121 kubelet[2106]: E0710 01:06:10.485123 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.491080 kubelet[2106]: E0710 01:06:10.491054 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.491080 kubelet[2106]: W0710 01:06:10.491070 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.491080 kubelet[2106]: E0710 01:06:10.491085 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.524070 kubelet[2106]: E0710 01:06:10.524035 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qgl94" podUID="7799fe3e-a251-4686-9a72-4acdb4232475" Jul 10 01:06:10.568776 kubelet[2106]: E0710 01:06:10.568714 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.568776 kubelet[2106]: W0710 01:06:10.568730 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.568776 kubelet[2106]: E0710 01:06:10.568744 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.568908 kubelet[2106]: E0710 01:06:10.568881 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.568908 kubelet[2106]: W0710 01:06:10.568886 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.568908 kubelet[2106]: E0710 01:06:10.568898 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.568998 kubelet[2106]: E0710 01:06:10.568985 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.568998 kubelet[2106]: W0710 01:06:10.568994 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.569050 kubelet[2106]: E0710 01:06:10.569000 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.569102 kubelet[2106]: E0710 01:06:10.569091 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.569102 kubelet[2106]: W0710 01:06:10.569100 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.569153 kubelet[2106]: E0710 01:06:10.569106 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.569228 kubelet[2106]: E0710 01:06:10.569215 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.569228 kubelet[2106]: W0710 01:06:10.569225 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.569287 kubelet[2106]: E0710 01:06:10.569232 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.569326 kubelet[2106]: E0710 01:06:10.569314 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.569326 kubelet[2106]: W0710 01:06:10.569323 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.569423 kubelet[2106]: E0710 01:06:10.569328 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.569448 kubelet[2106]: E0710 01:06:10.569423 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.569448 kubelet[2106]: W0710 01:06:10.569428 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.569448 kubelet[2106]: E0710 01:06:10.569433 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.569533 kubelet[2106]: E0710 01:06:10.569522 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.569533 kubelet[2106]: W0710 01:06:10.569530 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.569581 kubelet[2106]: E0710 01:06:10.569536 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.569634 kubelet[2106]: E0710 01:06:10.569623 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.569634 kubelet[2106]: W0710 01:06:10.569631 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.569683 kubelet[2106]: E0710 01:06:10.569636 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.569734 kubelet[2106]: E0710 01:06:10.569722 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.569734 kubelet[2106]: W0710 01:06:10.569731 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.569797 kubelet[2106]: E0710 01:06:10.569736 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.569831 kubelet[2106]: E0710 01:06:10.569821 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.569831 kubelet[2106]: W0710 01:06:10.569828 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.569877 kubelet[2106]: E0710 01:06:10.569833 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.572805 kubelet[2106]: E0710 01:06:10.572255 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.572805 kubelet[2106]: W0710 01:06:10.572264 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.572805 kubelet[2106]: E0710 01:06:10.572272 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.572805 kubelet[2106]: E0710 01:06:10.572399 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.572805 kubelet[2106]: W0710 01:06:10.572404 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.572805 kubelet[2106]: E0710 01:06:10.572416 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.572805 kubelet[2106]: E0710 01:06:10.572514 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.572805 kubelet[2106]: W0710 01:06:10.572519 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.572805 kubelet[2106]: E0710 01:06:10.572525 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.572805 kubelet[2106]: E0710 01:06:10.572622 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.573051 kubelet[2106]: W0710 01:06:10.572632 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.573051 kubelet[2106]: E0710 01:06:10.572638 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.573051 kubelet[2106]: E0710 01:06:10.572734 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.573051 kubelet[2106]: W0710 01:06:10.572739 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.573051 kubelet[2106]: E0710 01:06:10.572744 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.573275 kubelet[2106]: E0710 01:06:10.573184 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.573275 kubelet[2106]: W0710 01:06:10.573220 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.573275 kubelet[2106]: E0710 01:06:10.573229 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.573458 kubelet[2106]: E0710 01:06:10.573392 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.573458 kubelet[2106]: W0710 01:06:10.573398 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.573458 kubelet[2106]: E0710 01:06:10.573404 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.573644 kubelet[2106]: E0710 01:06:10.573579 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.573644 kubelet[2106]: W0710 01:06:10.573585 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.573644 kubelet[2106]: E0710 01:06:10.573591 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.573812 kubelet[2106]: E0710 01:06:10.573768 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.573812 kubelet[2106]: W0710 01:06:10.573774 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.573812 kubelet[2106]: E0710 01:06:10.573780 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.580968 kubelet[2106]: E0710 01:06:10.580930 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.580968 kubelet[2106]: W0710 01:06:10.580937 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.580968 kubelet[2106]: E0710 01:06:10.580944 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.580968 kubelet[2106]: I0710 01:06:10.580962 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/7799fe3e-a251-4686-9a72-4acdb4232475-registration-dir\") pod \"csi-node-driver-qgl94\" (UID: \"7799fe3e-a251-4686-9a72-4acdb4232475\") " pod="calico-system/csi-node-driver-qgl94" Jul 10 01:06:10.581096 kubelet[2106]: E0710 01:06:10.581088 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.581096 kubelet[2106]: W0710 01:06:10.581095 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.581140 kubelet[2106]: E0710 01:06:10.581101 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.581140 kubelet[2106]: I0710 01:06:10.581118 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gfs47\" (UniqueName: \"kubernetes.io/projected/7799fe3e-a251-4686-9a72-4acdb4232475-kube-api-access-gfs47\") pod \"csi-node-driver-qgl94\" (UID: \"7799fe3e-a251-4686-9a72-4acdb4232475\") " pod="calico-system/csi-node-driver-qgl94" Jul 10 01:06:10.581230 kubelet[2106]: E0710 01:06:10.581214 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.581230 kubelet[2106]: W0710 01:06:10.581226 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.581294 kubelet[2106]: E0710 01:06:10.581232 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.581294 kubelet[2106]: I0710 01:06:10.581243 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/7799fe3e-a251-4686-9a72-4acdb4232475-varrun\") pod \"csi-node-driver-qgl94\" (UID: \"7799fe3e-a251-4686-9a72-4acdb4232475\") " pod="calico-system/csi-node-driver-qgl94" Jul 10 01:06:10.581339 kubelet[2106]: E0710 01:06:10.581331 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.581339 kubelet[2106]: W0710 01:06:10.581336 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.581386 kubelet[2106]: E0710 01:06:10.581342 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.581386 kubelet[2106]: I0710 01:06:10.581350 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/7799fe3e-a251-4686-9a72-4acdb4232475-socket-dir\") pod \"csi-node-driver-qgl94\" (UID: \"7799fe3e-a251-4686-9a72-4acdb4232475\") " pod="calico-system/csi-node-driver-qgl94" Jul 10 01:06:10.581447 kubelet[2106]: E0710 01:06:10.581436 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.581447 kubelet[2106]: W0710 01:06:10.581444 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.581504 kubelet[2106]: E0710 01:06:10.581450 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.581504 kubelet[2106]: I0710 01:06:10.581459 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/7799fe3e-a251-4686-9a72-4acdb4232475-kubelet-dir\") pod \"csi-node-driver-qgl94\" (UID: \"7799fe3e-a251-4686-9a72-4acdb4232475\") " pod="calico-system/csi-node-driver-qgl94" Jul 10 01:06:10.581566 kubelet[2106]: E0710 01:06:10.581555 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.581566 kubelet[2106]: W0710 01:06:10.581563 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.581620 kubelet[2106]: E0710 01:06:10.581571 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.581679 kubelet[2106]: E0710 01:06:10.581663 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.581719 kubelet[2106]: W0710 01:06:10.581680 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.581719 kubelet[2106]: E0710 01:06:10.581686 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.581786 kubelet[2106]: E0710 01:06:10.581773 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.581786 kubelet[2106]: W0710 01:06:10.581782 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.581847 kubelet[2106]: E0710 01:06:10.581789 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.581891 kubelet[2106]: E0710 01:06:10.581879 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.581925 kubelet[2106]: W0710 01:06:10.581895 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.581925 kubelet[2106]: E0710 01:06:10.581903 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.582007 kubelet[2106]: E0710 01:06:10.581989 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.582007 kubelet[2106]: W0710 01:06:10.581994 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.582007 kubelet[2106]: E0710 01:06:10.582002 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.582096 kubelet[2106]: E0710 01:06:10.582085 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.582096 kubelet[2106]: W0710 01:06:10.582092 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.582096 kubelet[2106]: E0710 01:06:10.582097 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.582207 kubelet[2106]: E0710 01:06:10.582183 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.582245 kubelet[2106]: W0710 01:06:10.582210 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.582245 kubelet[2106]: E0710 01:06:10.582218 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.582309 kubelet[2106]: E0710 01:06:10.582301 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.582309 kubelet[2106]: W0710 01:06:10.582305 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.582373 kubelet[2106]: E0710 01:06:10.582311 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.582403 kubelet[2106]: E0710 01:06:10.582389 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.582403 kubelet[2106]: W0710 01:06:10.582393 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.582403 kubelet[2106]: E0710 01:06:10.582398 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.582482 kubelet[2106]: E0710 01:06:10.582471 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.582482 kubelet[2106]: W0710 01:06:10.582478 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.582543 kubelet[2106]: E0710 01:06:10.582483 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.616223 env[1246]: time="2025-07-10T01:06:10.616176211Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-hqn6v,Uid:94ee8bfa-ce82-4af6-9437-d9631223511d,Namespace:calico-system,Attempt:0,}" Jul 10 01:06:10.623926 env[1246]: time="2025-07-10T01:06:10.623875864Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:10.624088 env[1246]: time="2025-07-10T01:06:10.624069819Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:10.624164 env[1246]: time="2025-07-10T01:06:10.624151333Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:10.624421 env[1246]: time="2025-07-10T01:06:10.624394916Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/75749deda08f89e934fc0807b7ffe6272dea5a4092d725132c2ac12e10a31fb9 pid=2582 runtime=io.containerd.runc.v2 Jul 10 01:06:10.639251 systemd[1]: Started cri-containerd-75749deda08f89e934fc0807b7ffe6272dea5a4092d725132c2ac12e10a31fb9.scope. Jul 10 01:06:10.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit: BPF prog-id=125 op=LOAD Jul 10 01:06:10.650000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.650000 audit[2593]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2582 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.650000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735373439646564613038663839653933346663303830376237666665 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2582 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735373439646564613038663839653933346663303830376237666665 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit: BPF prog-id=126 op=LOAD Jul 10 01:06:10.651000 audit[2593]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0003127f0 items=0 ppid=2582 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735373439646564613038663839653933346663303830376237666665 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.651000 audit: BPF prog-id=127 op=LOAD Jul 10 01:06:10.651000 audit[2593]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000312838 items=0 ppid=2582 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.651000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735373439646564613038663839653933346663303830376237666665 Jul 10 01:06:10.652000 audit: BPF prog-id=127 op=UNLOAD Jul 10 01:06:10.652000 audit: BPF prog-id=126 op=UNLOAD Jul 10 01:06:10.652000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.652000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.652000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.652000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.652000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.652000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.652000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.652000 audit[2593]: AVC avc: denied { perfmon } for pid=2593 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.652000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.652000 audit[2593]: AVC avc: denied { bpf } for pid=2593 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:10.652000 audit: BPF prog-id=128 op=LOAD Jul 10 01:06:10.652000 audit[2593]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c000312c48 items=0 ppid=2582 pid=2593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:10.652000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735373439646564613038663839653933346663303830376237666665 Jul 10 01:06:10.664680 env[1246]: time="2025-07-10T01:06:10.664657086Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-hqn6v,Uid:94ee8bfa-ce82-4af6-9437-d9631223511d,Namespace:calico-system,Attempt:0,} returns sandbox id \"75749deda08f89e934fc0807b7ffe6272dea5a4092d725132c2ac12e10a31fb9\"" Jul 10 01:06:10.682345 kubelet[2106]: E0710 01:06:10.682325 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.682345 kubelet[2106]: W0710 01:06:10.682340 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.682477 kubelet[2106]: E0710 01:06:10.682354 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.682477 kubelet[2106]: E0710 01:06:10.682471 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.682477 kubelet[2106]: W0710 01:06:10.682477 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.682548 kubelet[2106]: E0710 01:06:10.682483 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.682593 kubelet[2106]: E0710 01:06:10.682580 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.682593 kubelet[2106]: W0710 01:06:10.682588 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.682660 kubelet[2106]: E0710 01:06:10.682596 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.682706 kubelet[2106]: E0710 01:06:10.682695 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.682706 kubelet[2106]: W0710 01:06:10.682702 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.682706 kubelet[2106]: E0710 01:06:10.682707 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.682813 kubelet[2106]: E0710 01:06:10.682798 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.682813 kubelet[2106]: W0710 01:06:10.682806 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.682813 kubelet[2106]: E0710 01:06:10.682811 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.683052 kubelet[2106]: E0710 01:06:10.683040 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.683052 kubelet[2106]: W0710 01:06:10.683049 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.683127 kubelet[2106]: E0710 01:06:10.683057 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.683150 kubelet[2106]: E0710 01:06:10.683147 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.683174 kubelet[2106]: W0710 01:06:10.683151 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.683174 kubelet[2106]: E0710 01:06:10.683156 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.683272 kubelet[2106]: E0710 01:06:10.683260 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.683272 kubelet[2106]: W0710 01:06:10.683269 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.683340 kubelet[2106]: E0710 01:06:10.683274 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.683560 kubelet[2106]: E0710 01:06:10.683492 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.683560 kubelet[2106]: W0710 01:06:10.683502 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.683560 kubelet[2106]: E0710 01:06:10.683512 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.683733 kubelet[2106]: E0710 01:06:10.683675 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.683733 kubelet[2106]: W0710 01:06:10.683681 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.683733 kubelet[2106]: E0710 01:06:10.683689 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.683934 kubelet[2106]: E0710 01:06:10.683850 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.683934 kubelet[2106]: W0710 01:06:10.683856 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.683934 kubelet[2106]: E0710 01:06:10.683863 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.684123 kubelet[2106]: E0710 01:06:10.684052 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.684123 kubelet[2106]: W0710 01:06:10.684058 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.684123 kubelet[2106]: E0710 01:06:10.684103 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.685169 kubelet[2106]: E0710 01:06:10.684259 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.685169 kubelet[2106]: W0710 01:06:10.684265 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.685169 kubelet[2106]: E0710 01:06:10.684307 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.685169 kubelet[2106]: E0710 01:06:10.684365 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.685169 kubelet[2106]: W0710 01:06:10.684370 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.685169 kubelet[2106]: E0710 01:06:10.684408 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.685169 kubelet[2106]: E0710 01:06:10.684461 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.685169 kubelet[2106]: W0710 01:06:10.684466 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.685169 kubelet[2106]: E0710 01:06:10.684501 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.685169 kubelet[2106]: E0710 01:06:10.684558 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.685405 kubelet[2106]: W0710 01:06:10.684563 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.685405 kubelet[2106]: E0710 01:06:10.684570 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.685405 kubelet[2106]: E0710 01:06:10.684655 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.685405 kubelet[2106]: W0710 01:06:10.684660 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.685405 kubelet[2106]: E0710 01:06:10.684671 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.685405 kubelet[2106]: E0710 01:06:10.684773 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.685405 kubelet[2106]: W0710 01:06:10.684778 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.685405 kubelet[2106]: E0710 01:06:10.684785 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.685405 kubelet[2106]: E0710 01:06:10.684889 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.685405 kubelet[2106]: W0710 01:06:10.684894 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.685638 kubelet[2106]: E0710 01:06:10.684902 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.685638 kubelet[2106]: E0710 01:06:10.684978 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.685638 kubelet[2106]: W0710 01:06:10.684983 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.685638 kubelet[2106]: E0710 01:06:10.684993 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.685638 kubelet[2106]: E0710 01:06:10.685091 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.685638 kubelet[2106]: W0710 01:06:10.685097 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.685638 kubelet[2106]: E0710 01:06:10.685103 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.686138 kubelet[2106]: E0710 01:06:10.685807 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.686138 kubelet[2106]: W0710 01:06:10.685813 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.686138 kubelet[2106]: E0710 01:06:10.685819 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.686138 kubelet[2106]: E0710 01:06:10.685905 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.686138 kubelet[2106]: W0710 01:06:10.685910 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.686138 kubelet[2106]: E0710 01:06:10.685916 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.686138 kubelet[2106]: E0710 01:06:10.686009 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.686138 kubelet[2106]: W0710 01:06:10.686013 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.686138 kubelet[2106]: E0710 01:06:10.686019 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.688279 kubelet[2106]: E0710 01:06:10.688242 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.688279 kubelet[2106]: W0710 01:06:10.688252 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.688279 kubelet[2106]: E0710 01:06:10.688260 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:10.695505 kubelet[2106]: E0710 01:06:10.695467 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:10.695505 kubelet[2106]: W0710 01:06:10.695477 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:10.695505 kubelet[2106]: E0710 01:06:10.695487 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:11.184615 systemd[1]: run-containerd-runc-k8s.io-8502b08a446af21be8fee87dc99504fdd143f74fd191f962cb91846a8d102ae3-runc.2OtNkp.mount: Deactivated successfully. Jul 10 01:06:12.042266 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3306045730.mount: Deactivated successfully. Jul 10 01:06:12.102828 kubelet[2106]: E0710 01:06:12.102473 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qgl94" podUID="7799fe3e-a251-4686-9a72-4acdb4232475" Jul 10 01:06:13.086800 env[1246]: time="2025-07-10T01:06:13.086773274Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:13.092017 env[1246]: time="2025-07-10T01:06:13.091998186Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:13.093302 env[1246]: time="2025-07-10T01:06:13.093289095Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:13.094205 env[1246]: time="2025-07-10T01:06:13.094178316Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:13.095332 env[1246]: time="2025-07-10T01:06:13.095310711Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 10 01:06:13.103746 env[1246]: time="2025-07-10T01:06:13.103715615Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 10 01:06:13.109975 env[1246]: time="2025-07-10T01:06:13.109944193Z" level=info msg="CreateContainer within sandbox \"8502b08a446af21be8fee87dc99504fdd143f74fd191f962cb91846a8d102ae3\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 10 01:06:13.116075 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2626906733.mount: Deactivated successfully. Jul 10 01:06:13.128382 env[1246]: time="2025-07-10T01:06:13.128348174Z" level=info msg="CreateContainer within sandbox \"8502b08a446af21be8fee87dc99504fdd143f74fd191f962cb91846a8d102ae3\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"a9691470d6bb36d1a870967adfdf38ca167e89581107124d5aeeaa7ba293bce2\"" Jul 10 01:06:13.129587 env[1246]: time="2025-07-10T01:06:13.129567395Z" level=info msg="StartContainer for \"a9691470d6bb36d1a870967adfdf38ca167e89581107124d5aeeaa7ba293bce2\"" Jul 10 01:06:13.148227 systemd[1]: Started cri-containerd-a9691470d6bb36d1a870967adfdf38ca167e89581107124d5aeeaa7ba293bce2.scope. Jul 10 01:06:13.161207 kernel: kauditd_printk_skb: 133 callbacks suppressed Jul 10 01:06:13.161269 kernel: audit: type=1400 audit(1752109573.155:958): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.161290 kernel: audit: type=1400 audit(1752109573.155:959): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167679 kernel: audit: type=1400 audit(1752109573.155:960): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167721 kernel: audit: type=1400 audit(1752109573.155:961): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.170241 kernel: audit: type=1400 audit(1752109573.155:962): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.172918 kernel: audit: type=1400 audit(1752109573.155:963): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.172949 kernel: audit: type=1400 audit(1752109573.155:964): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.177554 kernel: audit: type=1400 audit(1752109573.155:965): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.177631 kernel: audit: type=1400 audit(1752109573.155:966): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.182825 kernel: audit: type=1400 audit(1752109573.158:967): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.158000 audit: BPF prog-id=129 op=LOAD Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2495 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:13.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139363931343730643662623336643161383730393637616466646633 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2495 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:13.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139363931343730643662623336643161383730393637616466646633 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.164000 audit: BPF prog-id=130 op=LOAD Jul 10 01:06:13.164000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000dfd10 items=0 ppid=2495 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:13.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139363931343730643662623336643161383730393637616466646633 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit: BPF prog-id=131 op=LOAD Jul 10 01:06:13.167000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000dfd58 items=0 ppid=2495 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:13.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139363931343730643662623336643161383730393637616466646633 Jul 10 01:06:13.167000 audit: BPF prog-id=131 op=UNLOAD Jul 10 01:06:13.167000 audit: BPF prog-id=130 op=UNLOAD Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { perfmon } for pid=2651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit[2651]: AVC avc: denied { bpf } for pid=2651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:13.167000 audit: BPF prog-id=132 op=LOAD Jul 10 01:06:13.167000 audit[2651]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ca168 items=0 ppid=2495 pid=2651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:13.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139363931343730643662623336643161383730393637616466646633 Jul 10 01:06:13.204405 env[1246]: time="2025-07-10T01:06:13.202721485Z" level=info msg="StartContainer for \"a9691470d6bb36d1a870967adfdf38ca167e89581107124d5aeeaa7ba293bce2\" returns successfully" Jul 10 01:06:14.102647 kubelet[2106]: E0710 01:06:14.102423 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qgl94" podUID="7799fe3e-a251-4686-9a72-4acdb4232475" Jul 10 01:06:14.152927 kubelet[2106]: I0710 01:06:14.152893 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-67fd5d85f7-klm7w" podStartSLOduration=1.448483059 podStartE2EDuration="4.152881994s" podCreationTimestamp="2025-07-10 01:06:10 +0000 UTC" firstStartedPulling="2025-07-10 01:06:10.392376226 +0000 UTC m=+17.451326503" lastFinishedPulling="2025-07-10 01:06:13.096775164 +0000 UTC m=+20.155725438" observedRunningTime="2025-07-10 01:06:14.152756639 +0000 UTC m=+21.211706917" watchObservedRunningTime="2025-07-10 01:06:14.152881994 +0000 UTC m=+21.211832278" Jul 10 01:06:14.185000 audit[2688]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2688 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:14.185000 audit[2688]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd8a8adea0 a2=0 a3=7ffd8a8ade8c items=0 ppid=2209 pid=2688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:14.185000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:14.189000 audit[2688]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=2688 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:14.189000 audit[2688]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd8a8adea0 a2=0 a3=7ffd8a8ade8c items=0 ppid=2209 pid=2688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:14.189000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:14.197211 kubelet[2106]: E0710 01:06:14.197174 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.197331 kubelet[2106]: W0710 01:06:14.197316 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.197410 kubelet[2106]: E0710 01:06:14.197399 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.197628 kubelet[2106]: E0710 01:06:14.197620 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.197712 kubelet[2106]: W0710 01:06:14.197699 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.197788 kubelet[2106]: E0710 01:06:14.197779 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.197981 kubelet[2106]: E0710 01:06:14.197971 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.198054 kubelet[2106]: W0710 01:06:14.198042 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.198124 kubelet[2106]: E0710 01:06:14.198116 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.198328 kubelet[2106]: E0710 01:06:14.198319 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.198402 kubelet[2106]: W0710 01:06:14.198392 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.198473 kubelet[2106]: E0710 01:06:14.198465 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.198665 kubelet[2106]: E0710 01:06:14.198657 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.198734 kubelet[2106]: W0710 01:06:14.198724 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.198801 kubelet[2106]: E0710 01:06:14.198783 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.198982 kubelet[2106]: E0710 01:06:14.198975 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.199055 kubelet[2106]: W0710 01:06:14.199045 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.199132 kubelet[2106]: E0710 01:06:14.199123 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.199317 kubelet[2106]: E0710 01:06:14.199308 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.199397 kubelet[2106]: W0710 01:06:14.199386 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.199479 kubelet[2106]: E0710 01:06:14.199468 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.199655 kubelet[2106]: E0710 01:06:14.199648 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.199715 kubelet[2106]: W0710 01:06:14.199703 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.199790 kubelet[2106]: E0710 01:06:14.199778 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.203487 kubelet[2106]: E0710 01:06:14.200013 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.203487 kubelet[2106]: W0710 01:06:14.200020 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.203487 kubelet[2106]: E0710 01:06:14.200026 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.203487 kubelet[2106]: E0710 01:06:14.200149 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.203487 kubelet[2106]: W0710 01:06:14.200157 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.203487 kubelet[2106]: E0710 01:06:14.200167 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.203487 kubelet[2106]: E0710 01:06:14.200313 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.203487 kubelet[2106]: W0710 01:06:14.200319 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.203487 kubelet[2106]: E0710 01:06:14.200325 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.203487 kubelet[2106]: E0710 01:06:14.200434 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.203766 kubelet[2106]: W0710 01:06:14.200440 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.203766 kubelet[2106]: E0710 01:06:14.200447 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.203766 kubelet[2106]: E0710 01:06:14.200561 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.203766 kubelet[2106]: W0710 01:06:14.200567 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.203766 kubelet[2106]: E0710 01:06:14.200573 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.203766 kubelet[2106]: E0710 01:06:14.200682 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.203766 kubelet[2106]: W0710 01:06:14.200688 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.203766 kubelet[2106]: E0710 01:06:14.200694 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.203766 kubelet[2106]: E0710 01:06:14.200806 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.203766 kubelet[2106]: W0710 01:06:14.200812 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.204014 kubelet[2106]: E0710 01:06:14.200817 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.211083 kubelet[2106]: E0710 01:06:14.211068 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.211162 kubelet[2106]: W0710 01:06:14.211150 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.211230 kubelet[2106]: E0710 01:06:14.211221 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.211417 kubelet[2106]: E0710 01:06:14.211408 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.211467 kubelet[2106]: W0710 01:06:14.211458 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.211520 kubelet[2106]: E0710 01:06:14.211512 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.211643 kubelet[2106]: E0710 01:06:14.211626 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.211643 kubelet[2106]: W0710 01:06:14.211640 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.211709 kubelet[2106]: E0710 01:06:14.211651 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.211778 kubelet[2106]: E0710 01:06:14.211765 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.211778 kubelet[2106]: W0710 01:06:14.211775 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.211840 kubelet[2106]: E0710 01:06:14.211784 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.211882 kubelet[2106]: E0710 01:06:14.211872 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.211882 kubelet[2106]: W0710 01:06:14.211879 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.211942 kubelet[2106]: E0710 01:06:14.211889 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.212009 kubelet[2106]: E0710 01:06:14.211998 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.212009 kubelet[2106]: W0710 01:06:14.212007 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.212063 kubelet[2106]: E0710 01:06:14.212017 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.212465 kubelet[2106]: E0710 01:06:14.212450 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.212465 kubelet[2106]: W0710 01:06:14.212460 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.212528 kubelet[2106]: E0710 01:06:14.212467 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.212573 kubelet[2106]: E0710 01:06:14.212562 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.212573 kubelet[2106]: W0710 01:06:14.212571 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.212626 kubelet[2106]: E0710 01:06:14.212582 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.212701 kubelet[2106]: E0710 01:06:14.212690 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.212701 kubelet[2106]: W0710 01:06:14.212698 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.212770 kubelet[2106]: E0710 01:06:14.212748 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.212819 kubelet[2106]: E0710 01:06:14.212808 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.212819 kubelet[2106]: W0710 01:06:14.212816 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.212880 kubelet[2106]: E0710 01:06:14.212824 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.212906 kubelet[2106]: E0710 01:06:14.212903 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.212934 kubelet[2106]: W0710 01:06:14.212907 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.212934 kubelet[2106]: E0710 01:06:14.212912 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.212995 kubelet[2106]: E0710 01:06:14.212991 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.212995 kubelet[2106]: W0710 01:06:14.212995 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.213054 kubelet[2106]: E0710 01:06:14.213001 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.213097 kubelet[2106]: E0710 01:06:14.213085 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.213097 kubelet[2106]: W0710 01:06:14.213094 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.213151 kubelet[2106]: E0710 01:06:14.213104 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.213308 kubelet[2106]: E0710 01:06:14.213297 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.213308 kubelet[2106]: W0710 01:06:14.213305 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.213366 kubelet[2106]: E0710 01:06:14.213313 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.213404 kubelet[2106]: E0710 01:06:14.213393 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.213404 kubelet[2106]: W0710 01:06:14.213400 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.213467 kubelet[2106]: E0710 01:06:14.213405 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.213504 kubelet[2106]: E0710 01:06:14.213473 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.213504 kubelet[2106]: W0710 01:06:14.213477 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.213504 kubelet[2106]: E0710 01:06:14.213481 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.213575 kubelet[2106]: E0710 01:06:14.213560 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.213575 kubelet[2106]: W0710 01:06:14.213564 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.213575 kubelet[2106]: E0710 01:06:14.213568 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.213719 kubelet[2106]: E0710 01:06:14.213710 2106 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:06:14.213719 kubelet[2106]: W0710 01:06:14.213717 2106 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:06:14.213790 kubelet[2106]: E0710 01:06:14.213722 2106 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:06:14.961358 env[1246]: time="2025-07-10T01:06:14.961322743Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:14.964172 env[1246]: time="2025-07-10T01:06:14.964142943Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:14.965649 env[1246]: time="2025-07-10T01:06:14.965622839Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:14.967048 env[1246]: time="2025-07-10T01:06:14.967021562Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:14.967526 env[1246]: time="2025-07-10T01:06:14.967495931Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 10 01:06:14.971473 env[1246]: time="2025-07-10T01:06:14.971431528Z" level=info msg="CreateContainer within sandbox \"75749deda08f89e934fc0807b7ffe6272dea5a4092d725132c2ac12e10a31fb9\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 10 01:06:14.978566 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1380072731.mount: Deactivated successfully. Jul 10 01:06:14.981046 env[1246]: time="2025-07-10T01:06:14.981019292Z" level=info msg="CreateContainer within sandbox \"75749deda08f89e934fc0807b7ffe6272dea5a4092d725132c2ac12e10a31fb9\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"3e0548e6c93603ffaad9d4d33514624a8db2a529416ccf0643bd5c5e87620fd5\"" Jul 10 01:06:14.981652 env[1246]: time="2025-07-10T01:06:14.981638768Z" level=info msg="StartContainer for \"3e0548e6c93603ffaad9d4d33514624a8db2a529416ccf0643bd5c5e87620fd5\"" Jul 10 01:06:15.002799 systemd[1]: Started cri-containerd-3e0548e6c93603ffaad9d4d33514624a8db2a529416ccf0643bd5c5e87620fd5.scope. Jul 10 01:06:15.014000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.014000 audit[2730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f4e0b9ae8f8 items=0 ppid=2582 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:15.014000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303534386536633933363033666661616439643464333335313436 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit: BPF prog-id=133 op=LOAD Jul 10 01:06:15.015000 audit[2730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000e9ba8 items=0 ppid=2582 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:15.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303534386536633933363033666661616439643464333335313436 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.015000 audit: BPF prog-id=134 op=LOAD Jul 10 01:06:15.015000 audit[2730]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000e9bf8 items=0 ppid=2582 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:15.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303534386536633933363033666661616439643464333335313436 Jul 10 01:06:15.016000 audit: BPF prog-id=134 op=UNLOAD Jul 10 01:06:15.016000 audit: BPF prog-id=133 op=UNLOAD Jul 10 01:06:15.016000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.016000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.016000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.016000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.016000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.016000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.016000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.016000 audit[2730]: AVC avc: denied { perfmon } for pid=2730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.016000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.016000 audit[2730]: AVC avc: denied { bpf } for pid=2730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:15.016000 audit: BPF prog-id=135 op=LOAD Jul 10 01:06:15.016000 audit[2730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000e9c88 items=0 ppid=2582 pid=2730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:15.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303534386536633933363033666661616439643464333335313436 Jul 10 01:06:15.032410 env[1246]: time="2025-07-10T01:06:15.032383634Z" level=info msg="StartContainer for \"3e0548e6c93603ffaad9d4d33514624a8db2a529416ccf0643bd5c5e87620fd5\" returns successfully" Jul 10 01:06:15.034590 systemd[1]: cri-containerd-3e0548e6c93603ffaad9d4d33514624a8db2a529416ccf0643bd5c5e87620fd5.scope: Deactivated successfully. Jul 10 01:06:15.036000 audit: BPF prog-id=135 op=UNLOAD Jul 10 01:06:15.084596 env[1246]: time="2025-07-10T01:06:15.084513439Z" level=info msg="shim disconnected" id=3e0548e6c93603ffaad9d4d33514624a8db2a529416ccf0643bd5c5e87620fd5 Jul 10 01:06:15.084736 env[1246]: time="2025-07-10T01:06:15.084593224Z" level=warning msg="cleaning up after shim disconnected" id=3e0548e6c93603ffaad9d4d33514624a8db2a529416ccf0643bd5c5e87620fd5 namespace=k8s.io Jul 10 01:06:15.084736 env[1246]: time="2025-07-10T01:06:15.084617570Z" level=info msg="cleaning up dead shim" Jul 10 01:06:15.090281 env[1246]: time="2025-07-10T01:06:15.090248287Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:06:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2770 runtime=io.containerd.runc.v2\n" Jul 10 01:06:15.100497 systemd[1]: run-containerd-runc-k8s.io-3e0548e6c93603ffaad9d4d33514624a8db2a529416ccf0643bd5c5e87620fd5-runc.sVmE6q.mount: Deactivated successfully. Jul 10 01:06:15.100561 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3e0548e6c93603ffaad9d4d33514624a8db2a529416ccf0643bd5c5e87620fd5-rootfs.mount: Deactivated successfully. Jul 10 01:06:15.144389 env[1246]: time="2025-07-10T01:06:15.144365055Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 10 01:06:16.102081 kubelet[2106]: E0710 01:06:16.102043 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qgl94" podUID="7799fe3e-a251-4686-9a72-4acdb4232475" Jul 10 01:06:18.102642 kubelet[2106]: E0710 01:06:18.102615 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qgl94" podUID="7799fe3e-a251-4686-9a72-4acdb4232475" Jul 10 01:06:20.103226 kubelet[2106]: E0710 01:06:20.102973 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qgl94" podUID="7799fe3e-a251-4686-9a72-4acdb4232475" Jul 10 01:06:22.102615 kubelet[2106]: E0710 01:06:22.102351 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qgl94" podUID="7799fe3e-a251-4686-9a72-4acdb4232475" Jul 10 01:06:22.878893 env[1246]: time="2025-07-10T01:06:22.878862172Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:22.887822 env[1246]: time="2025-07-10T01:06:22.887805635Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:22.893685 env[1246]: time="2025-07-10T01:06:22.893660005Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:22.898399 env[1246]: time="2025-07-10T01:06:22.898379326Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:22.898603 env[1246]: time="2025-07-10T01:06:22.898584555Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 10 01:06:22.899945 env[1246]: time="2025-07-10T01:06:22.899925131Z" level=info msg="CreateContainer within sandbox \"75749deda08f89e934fc0807b7ffe6272dea5a4092d725132c2ac12e10a31fb9\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 10 01:06:22.921420 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1895255357.mount: Deactivated successfully. Jul 10 01:06:22.930833 env[1246]: time="2025-07-10T01:06:22.930796740Z" level=info msg="CreateContainer within sandbox \"75749deda08f89e934fc0807b7ffe6272dea5a4092d725132c2ac12e10a31fb9\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"c701b8dc7f989dac9a391ed8922a33b44bd45321e55573211846abeada042d72\"" Jul 10 01:06:22.932106 env[1246]: time="2025-07-10T01:06:22.931387771Z" level=info msg="StartContainer for \"c701b8dc7f989dac9a391ed8922a33b44bd45321e55573211846abeada042d72\"" Jul 10 01:06:22.956258 systemd[1]: Started cri-containerd-c701b8dc7f989dac9a391ed8922a33b44bd45321e55573211846abeada042d72.scope. Jul 10 01:06:22.959439 systemd[1]: run-containerd-runc-k8s.io-c701b8dc7f989dac9a391ed8922a33b44bd45321e55573211846abeada042d72-runc.JLpXRz.mount: Deactivated successfully. Jul 10 01:06:22.984000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.993963 kernel: kauditd_printk_skb: 97 callbacks suppressed Jul 10 01:06:22.994026 kernel: audit: type=1400 audit(1752109582.984:985): avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.984000 audit[2796]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f6e756a2c38 items=0 ppid=2582 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:22.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337303162386463376639383964616339613339316564383932326133 Jul 10 01:06:23.005112 kernel: audit: type=1300 audit(1752109582.984:985): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f6e756a2c38 items=0 ppid=2582 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:23.005154 kernel: audit: type=1327 audit(1752109582.984:985): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337303162386463376639383964616339613339316564383932326133 Jul 10 01:06:22.986000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.986000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:23.011514 kernel: audit: type=1400 audit(1752109582.986:986): avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:23.011552 kernel: audit: type=1400 audit(1752109582.986:986): avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:23.011568 kernel: audit: type=1400 audit(1752109582.986:986): avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.986000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.986000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:23.015389 kernel: audit: type=1400 audit(1752109582.986:986): avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.986000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:23.018213 kernel: audit: type=1400 audit(1752109582.986:986): avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:23.020266 kernel: audit: type=1400 audit(1752109582.986:986): avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.986000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:23.021259 kernel: audit: type=1400 audit(1752109582.986:986): avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.986000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.986000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.986000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.986000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.986000 audit: BPF prog-id=136 op=LOAD Jul 10 01:06:22.986000 audit[2796]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000286c28 items=0 ppid=2582 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:22.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337303162386463376639383964616339613339316564383932326133 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit: BPF prog-id=137 op=LOAD Jul 10 01:06:22.995000 audit[2796]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000286c78 items=0 ppid=2582 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:22.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337303162386463376639383964616339613339316564383932326133 Jul 10 01:06:22.995000 audit: BPF prog-id=137 op=UNLOAD Jul 10 01:06:22.995000 audit: BPF prog-id=136 op=UNLOAD Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { perfmon } for pid=2796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit[2796]: AVC avc: denied { bpf } for pid=2796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:22.995000 audit: BPF prog-id=138 op=LOAD Jul 10 01:06:22.995000 audit[2796]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000286d08 items=0 ppid=2582 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:22.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337303162386463376639383964616339613339316564383932326133 Jul 10 01:06:23.079031 env[1246]: time="2025-07-10T01:06:23.079001012Z" level=info msg="StartContainer for \"c701b8dc7f989dac9a391ed8922a33b44bd45321e55573211846abeada042d72\" returns successfully" Jul 10 01:06:24.102665 kubelet[2106]: E0710 01:06:24.102592 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-qgl94" podUID="7799fe3e-a251-4686-9a72-4acdb4232475" Jul 10 01:06:25.133434 env[1246]: time="2025-07-10T01:06:25.133370700Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 01:06:25.135328 systemd[1]: cri-containerd-c701b8dc7f989dac9a391ed8922a33b44bd45321e55573211846abeada042d72.scope: Deactivated successfully. Jul 10 01:06:25.139000 audit: BPF prog-id=138 op=UNLOAD Jul 10 01:06:25.149121 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c701b8dc7f989dac9a391ed8922a33b44bd45321e55573211846abeada042d72-rootfs.mount: Deactivated successfully. Jul 10 01:06:25.154707 env[1246]: time="2025-07-10T01:06:25.154561626Z" level=info msg="shim disconnected" id=c701b8dc7f989dac9a391ed8922a33b44bd45321e55573211846abeada042d72 Jul 10 01:06:25.154865 env[1246]: time="2025-07-10T01:06:25.154853221Z" level=warning msg="cleaning up after shim disconnected" id=c701b8dc7f989dac9a391ed8922a33b44bd45321e55573211846abeada042d72 namespace=k8s.io Jul 10 01:06:25.154927 env[1246]: time="2025-07-10T01:06:25.154907661Z" level=info msg="cleaning up dead shim" Jul 10 01:06:25.160220 kubelet[2106]: I0710 01:06:25.159237 2106 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 10 01:06:25.163538 env[1246]: time="2025-07-10T01:06:25.163516965Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:06:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2835 runtime=io.containerd.runc.v2\n" Jul 10 01:06:25.294896 systemd[1]: Created slice kubepods-burstable-podb9f5384c_315f_46eb_901d_44047587f05f.slice. Jul 10 01:06:25.314143 systemd[1]: Created slice kubepods-besteffort-pod3918eea8_777d_479a_8fb5_c5fdec742edf.slice. Jul 10 01:06:25.318058 systemd[1]: Created slice kubepods-burstable-pod3742d2bc_3ce5_4ffe_9879_3341b15e467d.slice. Jul 10 01:06:25.322753 systemd[1]: Created slice kubepods-besteffort-pod3180f4c6_8ed5_4a0a_af99_8b3974a06a57.slice. Jul 10 01:06:25.326353 systemd[1]: Created slice kubepods-besteffort-pod86db2015_705f_4be8_a79f_2635acd70c3f.slice. Jul 10 01:06:25.330595 systemd[1]: Created slice kubepods-besteffort-pod286d1b36_f2b8_4812_b1e3_9fca1cab12f4.slice. Jul 10 01:06:25.334578 systemd[1]: Created slice kubepods-besteffort-poda18c88cd_98e2_4bea_b2ca_cb35f62e7eb3.slice. Jul 10 01:06:25.338828 systemd[1]: Created slice kubepods-besteffort-podf3bf9bd5_e212_4aae_b3c5_d97b01ec7b79.slice. Jul 10 01:06:25.389719 kubelet[2106]: I0710 01:06:25.389644 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/3918eea8-777d-479a-8fb5-c5fdec742edf-whisker-backend-key-pair\") pod \"whisker-564cd87d4f-gl4lk\" (UID: \"3918eea8-777d-479a-8fb5-c5fdec742edf\") " pod="calico-system/whisker-564cd87d4f-gl4lk" Jul 10 01:06:25.389719 kubelet[2106]: I0710 01:06:25.389672 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fpnhl\" (UniqueName: \"kubernetes.io/projected/a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3-kube-api-access-fpnhl\") pod \"calico-kube-controllers-75d97f4747-nwdjf\" (UID: \"a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3\") " pod="calico-system/calico-kube-controllers-75d97f4747-nwdjf" Jul 10 01:06:25.389719 kubelet[2106]: I0710 01:06:25.389688 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3180f4c6-8ed5-4a0a-af99-8b3974a06a57-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-bxt4b\" (UID: \"3180f4c6-8ed5-4a0a-af99-8b3974a06a57\") " pod="calico-system/goldmane-58fd7646b9-bxt4b" Jul 10 01:06:25.390282 kubelet[2106]: I0710 01:06:25.389706 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p56jl\" (UniqueName: \"kubernetes.io/projected/286d1b36-f2b8-4812-b1e3-9fca1cab12f4-kube-api-access-p56jl\") pod \"calico-apiserver-c7878fddc-z4gjh\" (UID: \"286d1b36-f2b8-4812-b1e3-9fca1cab12f4\") " pod="calico-apiserver/calico-apiserver-c7878fddc-z4gjh" Jul 10 01:06:25.390282 kubelet[2106]: I0710 01:06:25.390278 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2gh4q\" (UniqueName: \"kubernetes.io/projected/b9f5384c-315f-46eb-901d-44047587f05f-kube-api-access-2gh4q\") pod \"coredns-7c65d6cfc9-qsmx6\" (UID: \"b9f5384c-315f-46eb-901d-44047587f05f\") " pod="kube-system/coredns-7c65d6cfc9-qsmx6" Jul 10 01:06:25.390586 kubelet[2106]: I0710 01:06:25.390290 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3-tigera-ca-bundle\") pod \"calico-kube-controllers-75d97f4747-nwdjf\" (UID: \"a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3\") " pod="calico-system/calico-kube-controllers-75d97f4747-nwdjf" Jul 10 01:06:25.390586 kubelet[2106]: I0710 01:06:25.390300 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lfktd\" (UniqueName: \"kubernetes.io/projected/86db2015-705f-4be8-a79f-2635acd70c3f-kube-api-access-lfktd\") pod \"calico-apiserver-c7878fddc-hxlk4\" (UID: \"86db2015-705f-4be8-a79f-2635acd70c3f\") " pod="calico-apiserver/calico-apiserver-c7878fddc-hxlk4" Jul 10 01:06:25.390586 kubelet[2106]: I0710 01:06:25.390321 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/b9f5384c-315f-46eb-901d-44047587f05f-config-volume\") pod \"coredns-7c65d6cfc9-qsmx6\" (UID: \"b9f5384c-315f-46eb-901d-44047587f05f\") " pod="kube-system/coredns-7c65d6cfc9-qsmx6" Jul 10 01:06:25.390586 kubelet[2106]: I0710 01:06:25.390339 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3918eea8-777d-479a-8fb5-c5fdec742edf-whisker-ca-bundle\") pod \"whisker-564cd87d4f-gl4lk\" (UID: \"3918eea8-777d-479a-8fb5-c5fdec742edf\") " pod="calico-system/whisker-564cd87d4f-gl4lk" Jul 10 01:06:25.390586 kubelet[2106]: I0710 01:06:25.390352 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/286d1b36-f2b8-4812-b1e3-9fca1cab12f4-calico-apiserver-certs\") pod \"calico-apiserver-c7878fddc-z4gjh\" (UID: \"286d1b36-f2b8-4812-b1e3-9fca1cab12f4\") " pod="calico-apiserver/calico-apiserver-c7878fddc-z4gjh" Jul 10 01:06:25.390699 kubelet[2106]: I0710 01:06:25.390363 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wqsrj\" (UniqueName: \"kubernetes.io/projected/f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79-kube-api-access-wqsrj\") pod \"calico-apiserver-6999bb78bb-w7jtd\" (UID: \"f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79\") " pod="calico-apiserver/calico-apiserver-6999bb78bb-w7jtd" Jul 10 01:06:25.390699 kubelet[2106]: I0710 01:06:25.390375 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gvkps\" (UniqueName: \"kubernetes.io/projected/3180f4c6-8ed5-4a0a-af99-8b3974a06a57-kube-api-access-gvkps\") pod \"goldmane-58fd7646b9-bxt4b\" (UID: \"3180f4c6-8ed5-4a0a-af99-8b3974a06a57\") " pod="calico-system/goldmane-58fd7646b9-bxt4b" Jul 10 01:06:25.390699 kubelet[2106]: I0710 01:06:25.390386 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lncp9\" (UniqueName: \"kubernetes.io/projected/3918eea8-777d-479a-8fb5-c5fdec742edf-kube-api-access-lncp9\") pod \"whisker-564cd87d4f-gl4lk\" (UID: \"3918eea8-777d-479a-8fb5-c5fdec742edf\") " pod="calico-system/whisker-564cd87d4f-gl4lk" Jul 10 01:06:25.390699 kubelet[2106]: I0710 01:06:25.390409 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/86db2015-705f-4be8-a79f-2635acd70c3f-calico-apiserver-certs\") pod \"calico-apiserver-c7878fddc-hxlk4\" (UID: \"86db2015-705f-4be8-a79f-2635acd70c3f\") " pod="calico-apiserver/calico-apiserver-c7878fddc-hxlk4" Jul 10 01:06:25.390699 kubelet[2106]: I0710 01:06:25.390427 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/3180f4c6-8ed5-4a0a-af99-8b3974a06a57-config\") pod \"goldmane-58fd7646b9-bxt4b\" (UID: \"3180f4c6-8ed5-4a0a-af99-8b3974a06a57\") " pod="calico-system/goldmane-58fd7646b9-bxt4b" Jul 10 01:06:25.390808 kubelet[2106]: I0710 01:06:25.390439 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sq8d6\" (UniqueName: \"kubernetes.io/projected/3742d2bc-3ce5-4ffe-9879-3341b15e467d-kube-api-access-sq8d6\") pod \"coredns-7c65d6cfc9-vlpgt\" (UID: \"3742d2bc-3ce5-4ffe-9879-3341b15e467d\") " pod="kube-system/coredns-7c65d6cfc9-vlpgt" Jul 10 01:06:25.390808 kubelet[2106]: I0710 01:06:25.390448 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79-calico-apiserver-certs\") pod \"calico-apiserver-6999bb78bb-w7jtd\" (UID: \"f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79\") " pod="calico-apiserver/calico-apiserver-6999bb78bb-w7jtd" Jul 10 01:06:25.390808 kubelet[2106]: I0710 01:06:25.390456 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/3180f4c6-8ed5-4a0a-af99-8b3974a06a57-goldmane-key-pair\") pod \"goldmane-58fd7646b9-bxt4b\" (UID: \"3180f4c6-8ed5-4a0a-af99-8b3974a06a57\") " pod="calico-system/goldmane-58fd7646b9-bxt4b" Jul 10 01:06:25.390808 kubelet[2106]: I0710 01:06:25.390466 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/3742d2bc-3ce5-4ffe-9879-3341b15e467d-config-volume\") pod \"coredns-7c65d6cfc9-vlpgt\" (UID: \"3742d2bc-3ce5-4ffe-9879-3341b15e467d\") " pod="kube-system/coredns-7c65d6cfc9-vlpgt" Jul 10 01:06:25.615850 env[1246]: time="2025-07-10T01:06:25.615816224Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-qsmx6,Uid:b9f5384c-315f-46eb-901d-44047587f05f,Namespace:kube-system,Attempt:0,}" Jul 10 01:06:25.616318 env[1246]: time="2025-07-10T01:06:25.616149778Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-564cd87d4f-gl4lk,Uid:3918eea8-777d-479a-8fb5-c5fdec742edf,Namespace:calico-system,Attempt:0,}" Jul 10 01:06:25.621901 env[1246]: time="2025-07-10T01:06:25.620055328Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-vlpgt,Uid:3742d2bc-3ce5-4ffe-9879-3341b15e467d,Namespace:kube-system,Attempt:0,}" Jul 10 01:06:25.625765 env[1246]: time="2025-07-10T01:06:25.625631024Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-bxt4b,Uid:3180f4c6-8ed5-4a0a-af99-8b3974a06a57,Namespace:calico-system,Attempt:0,}" Jul 10 01:06:25.629415 env[1246]: time="2025-07-10T01:06:25.629305128Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c7878fddc-hxlk4,Uid:86db2015-705f-4be8-a79f-2635acd70c3f,Namespace:calico-apiserver,Attempt:0,}" Jul 10 01:06:25.633034 env[1246]: time="2025-07-10T01:06:25.632917452Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c7878fddc-z4gjh,Uid:286d1b36-f2b8-4812-b1e3-9fca1cab12f4,Namespace:calico-apiserver,Attempt:0,}" Jul 10 01:06:25.637673 env[1246]: time="2025-07-10T01:06:25.637648032Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-75d97f4747-nwdjf,Uid:a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3,Namespace:calico-system,Attempt:0,}" Jul 10 01:06:25.641311 env[1246]: time="2025-07-10T01:06:25.641137582Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6999bb78bb-w7jtd,Uid:f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79,Namespace:calico-apiserver,Attempt:0,}" Jul 10 01:06:26.106639 systemd[1]: Created slice kubepods-besteffort-pod7799fe3e_a251_4686_9a72_4acdb4232475.slice. Jul 10 01:06:26.108536 env[1246]: time="2025-07-10T01:06:26.108504895Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qgl94,Uid:7799fe3e-a251-4686-9a72-4acdb4232475,Namespace:calico-system,Attempt:0,}" Jul 10 01:06:26.178628 env[1246]: time="2025-07-10T01:06:26.178604274Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 10 01:06:26.377334 env[1246]: time="2025-07-10T01:06:26.377252997Z" level=error msg="Failed to destroy network for sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.378867 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7-shm.mount: Deactivated successfully. Jul 10 01:06:26.380062 env[1246]: time="2025-07-10T01:06:26.380039701Z" level=error msg="encountered an error cleaning up failed sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.380158 env[1246]: time="2025-07-10T01:06:26.380140643Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-qsmx6,Uid:b9f5384c-315f-46eb-901d-44047587f05f,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.389094 env[1246]: time="2025-07-10T01:06:26.389061107Z" level=error msg="Failed to destroy network for sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.390618 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39-shm.mount: Deactivated successfully. Jul 10 01:06:26.392246 env[1246]: time="2025-07-10T01:06:26.392224347Z" level=error msg="encountered an error cleaning up failed sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.392335 env[1246]: time="2025-07-10T01:06:26.392315026Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qgl94,Uid:7799fe3e-a251-4686-9a72-4acdb4232475,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.406938 kubelet[2106]: E0710 01:06:26.406851 2106 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.408885 kubelet[2106]: E0710 01:06:26.408853 2106 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.415428 kubelet[2106]: E0710 01:06:26.415390 2106 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-qgl94" Jul 10 01:06:26.415639 kubelet[2106]: E0710 01:06:26.415392 2106 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-qsmx6" Jul 10 01:06:26.416838 kubelet[2106]: E0710 01:06:26.416314 2106 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-qsmx6" Jul 10 01:06:26.422890 kubelet[2106]: E0710 01:06:26.417561 2106 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-qgl94" Jul 10 01:06:26.422890 kubelet[2106]: E0710 01:06:26.420320 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-qgl94_calico-system(7799fe3e-a251-4686-9a72-4acdb4232475)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-qgl94_calico-system(7799fe3e-a251-4686-9a72-4acdb4232475)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-qgl94" podUID="7799fe3e-a251-4686-9a72-4acdb4232475" Jul 10 01:06:26.426777 kubelet[2106]: E0710 01:06:26.426737 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-qsmx6_kube-system(b9f5384c-315f-46eb-901d-44047587f05f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-qsmx6_kube-system(b9f5384c-315f-46eb-901d-44047587f05f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-qsmx6" podUID="b9f5384c-315f-46eb-901d-44047587f05f" Jul 10 01:06:26.437308 env[1246]: time="2025-07-10T01:06:26.437270356Z" level=error msg="Failed to destroy network for sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.442407 env[1246]: time="2025-07-10T01:06:26.439042723Z" level=error msg="encountered an error cleaning up failed sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.442407 env[1246]: time="2025-07-10T01:06:26.439083824Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c7878fddc-z4gjh,Uid:286d1b36-f2b8-4812-b1e3-9fca1cab12f4,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.438886 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67-shm.mount: Deactivated successfully. Jul 10 01:06:26.443251 kubelet[2106]: E0710 01:06:26.442590 2106 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.443251 kubelet[2106]: E0710 01:06:26.442643 2106 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-c7878fddc-z4gjh" Jul 10 01:06:26.443251 kubelet[2106]: E0710 01:06:26.442661 2106 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-c7878fddc-z4gjh" Jul 10 01:06:26.443361 kubelet[2106]: E0710 01:06:26.442703 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-c7878fddc-z4gjh_calico-apiserver(286d1b36-f2b8-4812-b1e3-9fca1cab12f4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-c7878fddc-z4gjh_calico-apiserver(286d1b36-f2b8-4812-b1e3-9fca1cab12f4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-c7878fddc-z4gjh" podUID="286d1b36-f2b8-4812-b1e3-9fca1cab12f4" Jul 10 01:06:26.469511 env[1246]: time="2025-07-10T01:06:26.469469255Z" level=error msg="Failed to destroy network for sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.474321 env[1246]: time="2025-07-10T01:06:26.471103708Z" level=error msg="encountered an error cleaning up failed sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.474321 env[1246]: time="2025-07-10T01:06:26.471138872Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-75d97f4747-nwdjf,Uid:a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.474431 kubelet[2106]: E0710 01:06:26.471957 2106 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.474431 kubelet[2106]: E0710 01:06:26.472001 2106 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-75d97f4747-nwdjf" Jul 10 01:06:26.474431 kubelet[2106]: E0710 01:06:26.472018 2106 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-75d97f4747-nwdjf" Jul 10 01:06:26.471003 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c-shm.mount: Deactivated successfully. Jul 10 01:06:26.480242 kubelet[2106]: E0710 01:06:26.472063 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-75d97f4747-nwdjf_calico-system(a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-75d97f4747-nwdjf_calico-system(a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-75d97f4747-nwdjf" podUID="a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3" Jul 10 01:06:26.482757 env[1246]: time="2025-07-10T01:06:26.482715069Z" level=error msg="Failed to destroy network for sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.483013 env[1246]: time="2025-07-10T01:06:26.482991205Z" level=error msg="encountered an error cleaning up failed sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.483056 env[1246]: time="2025-07-10T01:06:26.483025998Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-vlpgt,Uid:3742d2bc-3ce5-4ffe-9879-3341b15e467d,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.483311 kubelet[2106]: E0710 01:06:26.483160 2106 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.483311 kubelet[2106]: E0710 01:06:26.483224 2106 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-vlpgt" Jul 10 01:06:26.483311 kubelet[2106]: E0710 01:06:26.483236 2106 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-vlpgt" Jul 10 01:06:26.483404 kubelet[2106]: E0710 01:06:26.483286 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-vlpgt_kube-system(3742d2bc-3ce5-4ffe-9879-3341b15e467d)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-vlpgt_kube-system(3742d2bc-3ce5-4ffe-9879-3341b15e467d)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-vlpgt" podUID="3742d2bc-3ce5-4ffe-9879-3341b15e467d" Jul 10 01:06:26.483533 env[1246]: time="2025-07-10T01:06:26.483509637Z" level=error msg="Failed to destroy network for sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.483800 env[1246]: time="2025-07-10T01:06:26.483783115Z" level=error msg="encountered an error cleaning up failed sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.483877 env[1246]: time="2025-07-10T01:06:26.483860400Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c7878fddc-hxlk4,Uid:86db2015-705f-4be8-a79f-2635acd70c3f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.484017 kubelet[2106]: E0710 01:06:26.484000 2106 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.484060 kubelet[2106]: E0710 01:06:26.484028 2106 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-c7878fddc-hxlk4" Jul 10 01:06:26.484060 kubelet[2106]: E0710 01:06:26.484041 2106 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-c7878fddc-hxlk4" Jul 10 01:06:26.484108 kubelet[2106]: E0710 01:06:26.484066 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-c7878fddc-hxlk4_calico-apiserver(86db2015-705f-4be8-a79f-2635acd70c3f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-c7878fddc-hxlk4_calico-apiserver(86db2015-705f-4be8-a79f-2635acd70c3f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-c7878fddc-hxlk4" podUID="86db2015-705f-4be8-a79f-2635acd70c3f" Jul 10 01:06:26.492337 env[1246]: time="2025-07-10T01:06:26.492297205Z" level=error msg="Failed to destroy network for sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.493655 env[1246]: time="2025-07-10T01:06:26.493635871Z" level=error msg="Failed to destroy network for sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.494033 env[1246]: time="2025-07-10T01:06:26.494014418Z" level=error msg="encountered an error cleaning up failed sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.494132 env[1246]: time="2025-07-10T01:06:26.494105853Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-564cd87d4f-gl4lk,Uid:3918eea8-777d-479a-8fb5-c5fdec742edf,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.494266 env[1246]: time="2025-07-10T01:06:26.493842961Z" level=error msg="encountered an error cleaning up failed sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.496818 env[1246]: time="2025-07-10T01:06:26.495277932Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6999bb78bb-w7jtd,Uid:f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.496818 env[1246]: time="2025-07-10T01:06:26.495327234Z" level=error msg="Failed to destroy network for sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.496818 env[1246]: time="2025-07-10T01:06:26.495500496Z" level=error msg="encountered an error cleaning up failed sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.496818 env[1246]: time="2025-07-10T01:06:26.495539941Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-bxt4b,Uid:3180f4c6-8ed5-4a0a-af99-8b3974a06a57,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.496979 kubelet[2106]: E0710 01:06:26.495004 2106 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.496979 kubelet[2106]: E0710 01:06:26.495047 2106 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-564cd87d4f-gl4lk" Jul 10 01:06:26.496979 kubelet[2106]: E0710 01:06:26.495061 2106 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-564cd87d4f-gl4lk" Jul 10 01:06:26.497333 kubelet[2106]: E0710 01:06:26.495094 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-564cd87d4f-gl4lk_calico-system(3918eea8-777d-479a-8fb5-c5fdec742edf)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-564cd87d4f-gl4lk_calico-system(3918eea8-777d-479a-8fb5-c5fdec742edf)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-564cd87d4f-gl4lk" podUID="3918eea8-777d-479a-8fb5-c5fdec742edf" Jul 10 01:06:26.497333 kubelet[2106]: E0710 01:06:26.495955 2106 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.497333 kubelet[2106]: E0710 01:06:26.495977 2106 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-bxt4b" Jul 10 01:06:26.497434 kubelet[2106]: E0710 01:06:26.495987 2106 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-bxt4b" Jul 10 01:06:26.497434 kubelet[2106]: E0710 01:06:26.496004 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-bxt4b_calico-system(3180f4c6-8ed5-4a0a-af99-8b3974a06a57)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-bxt4b_calico-system(3180f4c6-8ed5-4a0a-af99-8b3974a06a57)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-bxt4b" podUID="3180f4c6-8ed5-4a0a-af99-8b3974a06a57" Jul 10 01:06:26.497434 kubelet[2106]: E0710 01:06:26.496025 2106 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:26.497519 kubelet[2106]: E0710 01:06:26.496037 2106 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6999bb78bb-w7jtd" Jul 10 01:06:26.497519 kubelet[2106]: E0710 01:06:26.496045 2106 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6999bb78bb-w7jtd" Jul 10 01:06:26.497519 kubelet[2106]: E0710 01:06:26.496059 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6999bb78bb-w7jtd_calico-apiserver(f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6999bb78bb-w7jtd_calico-apiserver(f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6999bb78bb-w7jtd" podUID="f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79" Jul 10 01:06:27.149708 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd-shm.mount: Deactivated successfully. Jul 10 01:06:27.149781 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d-shm.mount: Deactivated successfully. Jul 10 01:06:27.149827 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6-shm.mount: Deactivated successfully. Jul 10 01:06:27.149877 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333-shm.mount: Deactivated successfully. Jul 10 01:06:27.149920 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a-shm.mount: Deactivated successfully. Jul 10 01:06:27.178047 kubelet[2106]: I0710 01:06:27.178022 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:06:27.179869 kubelet[2106]: I0710 01:06:27.179845 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:06:27.189087 kubelet[2106]: I0710 01:06:27.189040 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:06:27.190904 env[1246]: time="2025-07-10T01:06:27.190860237Z" level=info msg="StopPodSandbox for \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\"" Jul 10 01:06:27.191184 env[1246]: time="2025-07-10T01:06:27.191164743Z" level=info msg="StopPodSandbox for \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\"" Jul 10 01:06:27.191517 env[1246]: time="2025-07-10T01:06:27.191501069Z" level=info msg="StopPodSandbox for \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\"" Jul 10 01:06:27.193856 kubelet[2106]: I0710 01:06:27.193840 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:27.194882 env[1246]: time="2025-07-10T01:06:27.194841187Z" level=info msg="StopPodSandbox for \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\"" Jul 10 01:06:27.196016 kubelet[2106]: I0710 01:06:27.196002 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:06:27.197183 env[1246]: time="2025-07-10T01:06:27.197095044Z" level=info msg="StopPodSandbox for \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\"" Jul 10 01:06:27.198428 kubelet[2106]: I0710 01:06:27.198388 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:06:27.199086 env[1246]: time="2025-07-10T01:06:27.199051871Z" level=info msg="StopPodSandbox for \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\"" Jul 10 01:06:27.199955 kubelet[2106]: I0710 01:06:27.199940 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:06:27.200272 env[1246]: time="2025-07-10T01:06:27.200257193Z" level=info msg="StopPodSandbox for \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\"" Jul 10 01:06:27.201680 kubelet[2106]: I0710 01:06:27.201663 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:06:27.202236 env[1246]: time="2025-07-10T01:06:27.202206252Z" level=info msg="StopPodSandbox for \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\"" Jul 10 01:06:27.203782 kubelet[2106]: I0710 01:06:27.203717 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:06:27.204261 env[1246]: time="2025-07-10T01:06:27.204240246Z" level=info msg="StopPodSandbox for \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\"" Jul 10 01:06:27.241038 env[1246]: time="2025-07-10T01:06:27.241000621Z" level=error msg="StopPodSandbox for \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\" failed" error="failed to destroy network for sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:27.241257 kubelet[2106]: E0710 01:06:27.241233 2106 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:06:27.241850 env[1246]: time="2025-07-10T01:06:27.241830138Z" level=error msg="StopPodSandbox for \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\" failed" error="failed to destroy network for sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:27.241981 kubelet[2106]: E0710 01:06:27.241957 2106 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:06:27.252100 kubelet[2106]: E0710 01:06:27.241280 2106 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39"} Jul 10 01:06:27.252183 kubelet[2106]: E0710 01:06:27.252128 2106 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7799fe3e-a251-4686-9a72-4acdb4232475\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:06:27.252183 kubelet[2106]: E0710 01:06:27.252154 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7799fe3e-a251-4686-9a72-4acdb4232475\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-qgl94" podUID="7799fe3e-a251-4686-9a72-4acdb4232475" Jul 10 01:06:27.252183 kubelet[2106]: E0710 01:06:27.241976 2106 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67"} Jul 10 01:06:27.252318 kubelet[2106]: E0710 01:06:27.252202 2106 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"286d1b36-f2b8-4812-b1e3-9fca1cab12f4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:06:27.252318 kubelet[2106]: E0710 01:06:27.252219 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"286d1b36-f2b8-4812-b1e3-9fca1cab12f4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-c7878fddc-z4gjh" podUID="286d1b36-f2b8-4812-b1e3-9fca1cab12f4" Jul 10 01:06:27.273254 env[1246]: time="2025-07-10T01:06:27.273211677Z" level=error msg="StopPodSandbox for \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\" failed" error="failed to destroy network for sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:27.273622 kubelet[2106]: E0710 01:06:27.273500 2106 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:06:27.273622 kubelet[2106]: E0710 01:06:27.273535 2106 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd"} Jul 10 01:06:27.273622 kubelet[2106]: E0710 01:06:27.273565 2106 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:06:27.273622 kubelet[2106]: E0710 01:06:27.273581 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6999bb78bb-w7jtd" podUID="f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79" Jul 10 01:06:27.273862 env[1246]: time="2025-07-10T01:06:27.273838064Z" level=error msg="StopPodSandbox for \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\" failed" error="failed to destroy network for sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:27.274012 kubelet[2106]: E0710 01:06:27.273993 2106 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:06:27.274053 kubelet[2106]: E0710 01:06:27.274014 2106 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d"} Jul 10 01:06:27.274053 kubelet[2106]: E0710 01:06:27.274045 2106 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"86db2015-705f-4be8-a79f-2635acd70c3f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:06:27.274133 kubelet[2106]: E0710 01:06:27.274058 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"86db2015-705f-4be8-a79f-2635acd70c3f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-c7878fddc-hxlk4" podUID="86db2015-705f-4be8-a79f-2635acd70c3f" Jul 10 01:06:27.285793 env[1246]: time="2025-07-10T01:06:27.285708677Z" level=error msg="StopPodSandbox for \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\" failed" error="failed to destroy network for sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:27.286143 kubelet[2106]: E0710 01:06:27.286046 2106 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:27.286143 kubelet[2106]: E0710 01:06:27.286084 2106 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333"} Jul 10 01:06:27.286143 kubelet[2106]: E0710 01:06:27.286108 2106 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3918eea8-777d-479a-8fb5-c5fdec742edf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:06:27.286143 kubelet[2106]: E0710 01:06:27.286123 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3918eea8-777d-479a-8fb5-c5fdec742edf\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-564cd87d4f-gl4lk" podUID="3918eea8-777d-479a-8fb5-c5fdec742edf" Jul 10 01:06:27.300338 env[1246]: time="2025-07-10T01:06:27.300287339Z" level=error msg="StopPodSandbox for \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\" failed" error="failed to destroy network for sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:27.300766 kubelet[2106]: E0710 01:06:27.300738 2106 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:06:27.300898 kubelet[2106]: E0710 01:06:27.300773 2106 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6"} Jul 10 01:06:27.300898 kubelet[2106]: E0710 01:06:27.300802 2106 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3742d2bc-3ce5-4ffe-9879-3341b15e467d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:06:27.300898 kubelet[2106]: E0710 01:06:27.300832 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3742d2bc-3ce5-4ffe-9879-3341b15e467d\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-vlpgt" podUID="3742d2bc-3ce5-4ffe-9879-3341b15e467d" Jul 10 01:06:27.310288 env[1246]: time="2025-07-10T01:06:27.310245962Z" level=error msg="StopPodSandbox for \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\" failed" error="failed to destroy network for sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:27.310636 kubelet[2106]: E0710 01:06:27.310524 2106 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:06:27.310636 kubelet[2106]: E0710 01:06:27.310568 2106 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c"} Jul 10 01:06:27.310636 kubelet[2106]: E0710 01:06:27.310590 2106 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:06:27.310636 kubelet[2106]: E0710 01:06:27.310603 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-75d97f4747-nwdjf" podUID="a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3" Jul 10 01:06:27.314496 env[1246]: time="2025-07-10T01:06:27.314462896Z" level=error msg="StopPodSandbox for \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\" failed" error="failed to destroy network for sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:27.314577 env[1246]: time="2025-07-10T01:06:27.314462901Z" level=error msg="StopPodSandbox for \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\" failed" error="failed to destroy network for sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:06:27.314780 kubelet[2106]: E0710 01:06:27.314671 2106 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:06:27.314780 kubelet[2106]: E0710 01:06:27.314697 2106 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7"} Jul 10 01:06:27.314780 kubelet[2106]: E0710 01:06:27.314670 2106 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:06:27.314780 kubelet[2106]: E0710 01:06:27.314718 2106 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b9f5384c-315f-46eb-901d-44047587f05f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:06:27.314906 kubelet[2106]: E0710 01:06:27.314734 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b9f5384c-315f-46eb-901d-44047587f05f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-qsmx6" podUID="b9f5384c-315f-46eb-901d-44047587f05f" Jul 10 01:06:27.314906 kubelet[2106]: E0710 01:06:27.314719 2106 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a"} Jul 10 01:06:27.314906 kubelet[2106]: E0710 01:06:27.314755 2106 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3180f4c6-8ed5-4a0a-af99-8b3974a06a57\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:06:27.314906 kubelet[2106]: E0710 01:06:27.314768 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3180f4c6-8ed5-4a0a-af99-8b3974a06a57\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-bxt4b" podUID="3180f4c6-8ed5-4a0a-af99-8b3974a06a57" Jul 10 01:06:34.481792 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2117462180.mount: Deactivated successfully. Jul 10 01:06:34.515769 env[1246]: time="2025-07-10T01:06:34.515733107Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:34.517666 env[1246]: time="2025-07-10T01:06:34.517649146Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:34.518475 env[1246]: time="2025-07-10T01:06:34.518452213Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:34.519582 env[1246]: time="2025-07-10T01:06:34.519565057Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:34.520122 env[1246]: time="2025-07-10T01:06:34.520105158Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 10 01:06:34.573065 env[1246]: time="2025-07-10T01:06:34.573041759Z" level=info msg="CreateContainer within sandbox \"75749deda08f89e934fc0807b7ffe6272dea5a4092d725132c2ac12e10a31fb9\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 10 01:06:34.584206 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1016993733.mount: Deactivated successfully. Jul 10 01:06:34.587119 env[1246]: time="2025-07-10T01:06:34.587091394Z" level=info msg="CreateContainer within sandbox \"75749deda08f89e934fc0807b7ffe6272dea5a4092d725132c2ac12e10a31fb9\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"3b710d5115631c01c0bb6a1f8e81b1960ad3db7e6b2e11f87fe772194a7d57b0\"" Jul 10 01:06:34.587816 env[1246]: time="2025-07-10T01:06:34.587804347Z" level=info msg="StartContainer for \"3b710d5115631c01c0bb6a1f8e81b1960ad3db7e6b2e11f87fe772194a7d57b0\"" Jul 10 01:06:34.607050 systemd[1]: Started cri-containerd-3b710d5115631c01c0bb6a1f8e81b1960ad3db7e6b2e11f87fe772194a7d57b0.scope. Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.627909 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 10 01:06:34.628822 kernel: audit: type=1400 audit(1752109594.623:992): avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.628848 kernel: audit: type=1300 audit(1752109594.623:992): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7fadb73e62f8 items=0 ppid=2582 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:34.623000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7fadb73e62f8 items=0 ppid=2582 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:34.631981 kernel: audit: type=1327 audit(1752109594.623:992): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362373130643531313536333163303163306262366131663865383162 Jul 10 01:06:34.636283 kernel: audit: type=1400 audit(1752109594.623:993): avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362373130643531313536333163303163306262366131663865383162 Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.640593 kernel: audit: type=1400 audit(1752109594.623:993): avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.640620 kernel: audit: type=1400 audit(1752109594.623:993): avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.645277 kernel: audit: type=1400 audit(1752109594.623:993): avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.645892 kernel: audit: type=1400 audit(1752109594.623:993): avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.647950 kernel: audit: type=1400 audit(1752109594.623:993): avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.652540 kernel: audit: type=1400 audit(1752109594.623:993): avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.623000 audit: BPF prog-id=139 op=LOAD Jul 10 01:06:34.623000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000024238 items=0 ppid=2582 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:34.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362373130643531313536333163303163306262366131663865383162 Jul 10 01:06:34.628000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.628000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.628000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.628000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.628000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.628000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.628000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.628000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.628000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.628000 audit: BPF prog-id=140 op=LOAD Jul 10 01:06:34.628000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000024288 items=0 ppid=2582 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:34.628000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362373130643531313536333163303163306262366131663865383162 Jul 10 01:06:34.636000 audit: BPF prog-id=140 op=UNLOAD Jul 10 01:06:34.639000 audit: BPF prog-id=139 op=UNLOAD Jul 10 01:06:34.639000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.639000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.639000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.639000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.639000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.639000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.639000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.639000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.639000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.639000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:34.639000 audit: BPF prog-id=141 op=LOAD Jul 10 01:06:34.639000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000024318 items=0 ppid=2582 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:34.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362373130643531313536333163303163306262366131663865383162 Jul 10 01:06:34.664018 env[1246]: time="2025-07-10T01:06:34.663997001Z" level=info msg="StartContainer for \"3b710d5115631c01c0bb6a1f8e81b1960ad3db7e6b2e11f87fe772194a7d57b0\" returns successfully" Jul 10 01:06:35.445422 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 10 01:06:35.445595 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 10 01:06:35.746019 kubelet[2106]: I0710 01:06:35.742266 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-hqn6v" podStartSLOduration=1.875928075 podStartE2EDuration="25.73124945s" podCreationTimestamp="2025-07-10 01:06:10 +0000 UTC" firstStartedPulling="2025-07-10 01:06:10.66545722 +0000 UTC m=+17.724407495" lastFinishedPulling="2025-07-10 01:06:34.520778593 +0000 UTC m=+41.579728870" observedRunningTime="2025-07-10 01:06:35.256274986 +0000 UTC m=+42.315225285" watchObservedRunningTime="2025-07-10 01:06:35.73124945 +0000 UTC m=+42.790199733" Jul 10 01:06:35.749066 env[1246]: time="2025-07-10T01:06:35.749037283Z" level=info msg="StopPodSandbox for \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\"" Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:35.822 [INFO][3347] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:35.824 [INFO][3347] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" iface="eth0" netns="/var/run/netns/cni-6b71321e-b592-24ab-e6c1-a6c0b5adf0f5" Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:35.824 [INFO][3347] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" iface="eth0" netns="/var/run/netns/cni-6b71321e-b592-24ab-e6c1-a6c0b5adf0f5" Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:35.825 [INFO][3347] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" iface="eth0" netns="/var/run/netns/cni-6b71321e-b592-24ab-e6c1-a6c0b5adf0f5" Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:35.825 [INFO][3347] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:35.825 [INFO][3347] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:36.079 [INFO][3357] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" HandleID="k8s-pod-network.450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Workload="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:36.082 [INFO][3357] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:36.082 [INFO][3357] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:36.095 [WARNING][3357] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" HandleID="k8s-pod-network.450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Workload="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:36.095 [INFO][3357] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" HandleID="k8s-pod-network.450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Workload="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:36.096 [INFO][3357] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:36.099144 env[1246]: 2025-07-10 01:06:36.097 [INFO][3347] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:36.101972 env[1246]: time="2025-07-10T01:06:36.101315534Z" level=info msg="TearDown network for sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\" successfully" Jul 10 01:06:36.101972 env[1246]: time="2025-07-10T01:06:36.101340258Z" level=info msg="StopPodSandbox for \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\" returns successfully" Jul 10 01:06:36.100779 systemd[1]: run-netns-cni\x2d6b71321e\x2db592\x2d24ab\x2de6c1\x2da6c0b5adf0f5.mount: Deactivated successfully. Jul 10 01:06:36.180900 kubelet[2106]: I0710 01:06:36.180872 2106 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3918eea8-777d-479a-8fb5-c5fdec742edf-whisker-ca-bundle\") pod \"3918eea8-777d-479a-8fb5-c5fdec742edf\" (UID: \"3918eea8-777d-479a-8fb5-c5fdec742edf\") " Jul 10 01:06:36.180997 kubelet[2106]: I0710 01:06:36.180922 2106 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/3918eea8-777d-479a-8fb5-c5fdec742edf-whisker-backend-key-pair\") pod \"3918eea8-777d-479a-8fb5-c5fdec742edf\" (UID: \"3918eea8-777d-479a-8fb5-c5fdec742edf\") " Jul 10 01:06:36.180997 kubelet[2106]: I0710 01:06:36.180940 2106 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-lncp9\" (UniqueName: \"kubernetes.io/projected/3918eea8-777d-479a-8fb5-c5fdec742edf-kube-api-access-lncp9\") pod \"3918eea8-777d-479a-8fb5-c5fdec742edf\" (UID: \"3918eea8-777d-479a-8fb5-c5fdec742edf\") " Jul 10 01:06:36.184048 kubelet[2106]: I0710 01:06:36.181763 2106 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/3918eea8-777d-479a-8fb5-c5fdec742edf-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "3918eea8-777d-479a-8fb5-c5fdec742edf" (UID: "3918eea8-777d-479a-8fb5-c5fdec742edf"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 10 01:06:36.187804 systemd[1]: var-lib-kubelet-pods-3918eea8\x2d777d\x2d479a\x2d8fb5\x2dc5fdec742edf-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dlncp9.mount: Deactivated successfully. Jul 10 01:06:36.189679 systemd[1]: var-lib-kubelet-pods-3918eea8\x2d777d\x2d479a\x2d8fb5\x2dc5fdec742edf-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 10 01:06:36.191351 kubelet[2106]: I0710 01:06:36.190156 2106 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/3918eea8-777d-479a-8fb5-c5fdec742edf-kube-api-access-lncp9" (OuterVolumeSpecName: "kube-api-access-lncp9") pod "3918eea8-777d-479a-8fb5-c5fdec742edf" (UID: "3918eea8-777d-479a-8fb5-c5fdec742edf"). InnerVolumeSpecName "kube-api-access-lncp9". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 10 01:06:36.191351 kubelet[2106]: I0710 01:06:36.191236 2106 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/3918eea8-777d-479a-8fb5-c5fdec742edf-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "3918eea8-777d-479a-8fb5-c5fdec742edf" (UID: "3918eea8-777d-479a-8fb5-c5fdec742edf"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 10 01:06:36.266250 systemd[1]: Removed slice kubepods-besteffort-pod3918eea8_777d_479a_8fb5_c5fdec742edf.slice. Jul 10 01:06:36.282767 kubelet[2106]: I0710 01:06:36.282742 2106 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/3918eea8-777d-479a-8fb5-c5fdec742edf-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 10 01:06:36.282767 kubelet[2106]: I0710 01:06:36.282760 2106 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-lncp9\" (UniqueName: \"kubernetes.io/projected/3918eea8-777d-479a-8fb5-c5fdec742edf-kube-api-access-lncp9\") on node \"localhost\" DevicePath \"\"" Jul 10 01:06:36.282767 kubelet[2106]: I0710 01:06:36.282766 2106 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3918eea8-777d-479a-8fb5-c5fdec742edf-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 10 01:06:36.322084 systemd[1]: Created slice kubepods-besteffort-podf35859a6_1117_4a8d_97af_7b1494f4cd2f.slice. Jul 10 01:06:36.383782 kubelet[2106]: I0710 01:06:36.383717 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f35859a6-1117-4a8d-97af-7b1494f4cd2f-whisker-backend-key-pair\") pod \"whisker-9fdbf5cff-6pq9j\" (UID: \"f35859a6-1117-4a8d-97af-7b1494f4cd2f\") " pod="calico-system/whisker-9fdbf5cff-6pq9j" Jul 10 01:06:36.383974 kubelet[2106]: I0710 01:06:36.383962 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f35859a6-1117-4a8d-97af-7b1494f4cd2f-whisker-ca-bundle\") pod \"whisker-9fdbf5cff-6pq9j\" (UID: \"f35859a6-1117-4a8d-97af-7b1494f4cd2f\") " pod="calico-system/whisker-9fdbf5cff-6pq9j" Jul 10 01:06:36.384043 kubelet[2106]: I0710 01:06:36.384033 2106 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lkqnj\" (UniqueName: \"kubernetes.io/projected/f35859a6-1117-4a8d-97af-7b1494f4cd2f-kube-api-access-lkqnj\") pod \"whisker-9fdbf5cff-6pq9j\" (UID: \"f35859a6-1117-4a8d-97af-7b1494f4cd2f\") " pod="calico-system/whisker-9fdbf5cff-6pq9j" Jul 10 01:06:36.481877 systemd[1]: run-containerd-runc-k8s.io-3b710d5115631c01c0bb6a1f8e81b1960ad3db7e6b2e11f87fe772194a7d57b0-runc.CnqZ7V.mount: Deactivated successfully. Jul 10 01:06:36.625359 env[1246]: time="2025-07-10T01:06:36.625326152Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-9fdbf5cff-6pq9j,Uid:f35859a6-1117-4a8d-97af-7b1494f4cd2f,Namespace:calico-system,Attempt:0,}" Jul 10 01:06:36.755506 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 01:06:36.756116 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3f394b01a11: link becomes ready Jul 10 01:06:36.760257 systemd-networkd[1063]: cali3f394b01a11: Link UP Jul 10 01:06:36.760477 systemd-networkd[1063]: cali3f394b01a11: Gained carrier Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.649 [INFO][3399] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.657 [INFO][3399] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0 whisker-9fdbf5cff- calico-system f35859a6-1117-4a8d-97af-7b1494f4cd2f 910 0 2025-07-10 01:06:36 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:9fdbf5cff projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-9fdbf5cff-6pq9j eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali3f394b01a11 [] [] }} ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Namespace="calico-system" Pod="whisker-9fdbf5cff-6pq9j" WorkloadEndpoint="localhost-k8s-whisker--9fdbf5cff--6pq9j-" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.658 [INFO][3399] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Namespace="calico-system" Pod="whisker-9fdbf5cff-6pq9j" WorkloadEndpoint="localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.683 [INFO][3411] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" HandleID="k8s-pod-network.394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Workload="localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.684 [INFO][3411] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" HandleID="k8s-pod-network.394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Workload="localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5690), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-9fdbf5cff-6pq9j", "timestamp":"2025-07-10 01:06:36.683489277 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.684 [INFO][3411] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.684 [INFO][3411] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.684 [INFO][3411] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.717 [INFO][3411] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" host="localhost" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.729 [INFO][3411] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.731 [INFO][3411] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.732 [INFO][3411] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.734 [INFO][3411] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.734 [INFO][3411] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" host="localhost" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.734 [INFO][3411] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468 Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.736 [INFO][3411] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" host="localhost" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.741 [INFO][3411] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" host="localhost" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.741 [INFO][3411] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" host="localhost" Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.741 [INFO][3411] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:36.772554 env[1246]: 2025-07-10 01:06:36.741 [INFO][3411] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" HandleID="k8s-pod-network.394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Workload="localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0" Jul 10 01:06:36.774726 env[1246]: 2025-07-10 01:06:36.743 [INFO][3399] cni-plugin/k8s.go 418: Populated endpoint ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Namespace="calico-system" Pod="whisker-9fdbf5cff-6pq9j" WorkloadEndpoint="localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0", GenerateName:"whisker-9fdbf5cff-", Namespace:"calico-system", SelfLink:"", UID:"f35859a6-1117-4a8d-97af-7b1494f4cd2f", ResourceVersion:"910", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"9fdbf5cff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-9fdbf5cff-6pq9j", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali3f394b01a11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:36.774726 env[1246]: 2025-07-10 01:06:36.743 [INFO][3399] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Namespace="calico-system" Pod="whisker-9fdbf5cff-6pq9j" WorkloadEndpoint="localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0" Jul 10 01:06:36.774726 env[1246]: 2025-07-10 01:06:36.743 [INFO][3399] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3f394b01a11 ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Namespace="calico-system" Pod="whisker-9fdbf5cff-6pq9j" WorkloadEndpoint="localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0" Jul 10 01:06:36.774726 env[1246]: 2025-07-10 01:06:36.755 [INFO][3399] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Namespace="calico-system" Pod="whisker-9fdbf5cff-6pq9j" WorkloadEndpoint="localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0" Jul 10 01:06:36.774726 env[1246]: 2025-07-10 01:06:36.755 [INFO][3399] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Namespace="calico-system" Pod="whisker-9fdbf5cff-6pq9j" WorkloadEndpoint="localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0", GenerateName:"whisker-9fdbf5cff-", Namespace:"calico-system", SelfLink:"", UID:"f35859a6-1117-4a8d-97af-7b1494f4cd2f", ResourceVersion:"910", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"9fdbf5cff", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468", Pod:"whisker-9fdbf5cff-6pq9j", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali3f394b01a11", MAC:"fa:57:4c:60:b1:13", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:36.774726 env[1246]: 2025-07-10 01:06:36.769 [INFO][3399] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468" Namespace="calico-system" Pod="whisker-9fdbf5cff-6pq9j" WorkloadEndpoint="localhost-k8s-whisker--9fdbf5cff--6pq9j-eth0" Jul 10 01:06:36.780152 env[1246]: time="2025-07-10T01:06:36.780113470Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:36.780270 env[1246]: time="2025-07-10T01:06:36.780255545Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:36.780338 env[1246]: time="2025-07-10T01:06:36.780325407Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:36.780819 env[1246]: time="2025-07-10T01:06:36.780782941Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468 pid=3432 runtime=io.containerd.runc.v2 Jul 10 01:06:36.793438 systemd[1]: Started cri-containerd-394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468.scope. Jul 10 01:06:36.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit: BPF prog-id=142 op=LOAD Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3432 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339343439356462356630326532383361646637616438623339386434 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3432 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339343439356462356630326532383361646637616438623339386434 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit: BPF prog-id=143 op=LOAD Jul 10 01:06:36.808000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028cc40 items=0 ppid=3432 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339343439356462356630326532383361646637616438623339386434 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.808000 audit: BPF prog-id=144 op=LOAD Jul 10 01:06:36.808000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028cc88 items=0 ppid=3432 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.808000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339343439356462356630326532383361646637616438623339386434 Jul 10 01:06:36.809000 audit: BPF prog-id=144 op=UNLOAD Jul 10 01:06:36.809000 audit: BPF prog-id=143 op=UNLOAD Jul 10 01:06:36.809000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.809000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.809000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.809000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.809000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.809000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.809000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.809000 audit[3441]: AVC avc: denied { perfmon } for pid=3441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.809000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.809000 audit[3441]: AVC avc: denied { bpf } for pid=3441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:36.809000 audit: BPF prog-id=145 op=LOAD Jul 10 01:06:36.809000 audit[3441]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00028d098 items=0 ppid=3432 pid=3441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339343439356462356630326532383361646637616438623339386434 Jul 10 01:06:36.811641 systemd-resolved[1196]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:06:36.837727 env[1246]: time="2025-07-10T01:06:36.837701716Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-9fdbf5cff-6pq9j,Uid:f35859a6-1117-4a8d-97af-7b1494f4cd2f,Namespace:calico-system,Attempt:0,} returns sandbox id \"394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468\"" Jul 10 01:06:36.840122 env[1246]: time="2025-07-10T01:06:36.840096875Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 10 01:06:36.887000 audit[3516]: AVC avc: denied { write } for pid=3516 comm="tee" name="fd" dev="proc" ino=37827 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:06:36.888000 audit[3514]: AVC avc: denied { write } for pid=3514 comm="tee" name="fd" dev="proc" ino=37830 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:06:36.888000 audit[3514]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe07bda7e9 a2=241 a3=1b6 items=1 ppid=3474 pid=3514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.888000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 10 01:06:36.888000 audit: PATH item=0 name="/dev/fd/63" inode=37808 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:06:36.888000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:06:36.887000 audit[3516]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe282c57e9 a2=241 a3=1b6 items=1 ppid=3476 pid=3516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.887000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 10 01:06:36.887000 audit: PATH item=0 name="/dev/fd/63" inode=37811 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:06:36.887000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:06:36.898000 audit[3531]: AVC avc: denied { write } for pid=3531 comm="tee" name="fd" dev="proc" ino=37839 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:06:36.903000 audit[3540]: AVC avc: denied { write } for pid=3540 comm="tee" name="fd" dev="proc" ino=36499 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:06:36.903000 audit[3540]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffee3dfe7eb a2=241 a3=1b6 items=1 ppid=3489 pid=3540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.903000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 10 01:06:36.903000 audit: PATH item=0 name="/dev/fd/63" inode=37834 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:06:36.903000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:06:36.898000 audit[3531]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd394d77da a2=241 a3=1b6 items=1 ppid=3479 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.898000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 10 01:06:36.898000 audit: PATH item=0 name="/dev/fd/63" inode=37820 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:06:36.898000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:06:36.906000 audit[3544]: AVC avc: denied { write } for pid=3544 comm="tee" name="fd" dev="proc" ino=36506 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:06:36.906000 audit[3544]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc8ef5f7ea a2=241 a3=1b6 items=1 ppid=3485 pid=3544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.906000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 10 01:06:36.906000 audit: PATH item=0 name="/dev/fd/63" inode=36503 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:06:36.906000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:06:36.907000 audit[3526]: AVC avc: denied { write } for pid=3526 comm="tee" name="fd" dev="proc" ino=36510 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:06:36.907000 audit[3526]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe23c657d9 a2=241 a3=1b6 items=1 ppid=3481 pid=3526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.907000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 10 01:06:36.907000 audit: PATH item=0 name="/dev/fd/63" inode=36487 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:06:36.907000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:06:36.917000 audit[3549]: AVC avc: denied { write } for pid=3549 comm="tee" name="fd" dev="proc" ino=36520 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:06:36.917000 audit[3549]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff6e1e27e9 a2=241 a3=1b6 items=1 ppid=3487 pid=3549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:36.917000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 10 01:06:36.917000 audit: PATH item=0 name="/dev/fd/63" inode=36517 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:06:36.917000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:06:37.106672 kubelet[2106]: I0710 01:06:37.106620 2106 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="3918eea8-777d-479a-8fb5-c5fdec742edf" path="/var/lib/kubelet/pods/3918eea8-777d-479a-8fb5-c5fdec742edf/volumes" Jul 10 01:06:37.123000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.123000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.123000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.123000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.123000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.123000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.123000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.123000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.123000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.123000 audit: BPF prog-id=146 op=LOAD Jul 10 01:06:37.123000 audit[3564]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffca3ef4230 a2=98 a3=1fffffffffffffff items=0 ppid=3488 pid=3564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.123000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 01:06:37.124000 audit: BPF prog-id=146 op=UNLOAD Jul 10 01:06:37.129000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.129000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.129000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.129000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.129000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.129000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.129000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.129000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.129000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.129000 audit: BPF prog-id=147 op=LOAD Jul 10 01:06:37.129000 audit[3564]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffca3ef4110 a2=94 a3=3 items=0 ppid=3488 pid=3564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.129000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 01:06:37.130000 audit: BPF prog-id=147 op=UNLOAD Jul 10 01:06:37.130000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.130000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.130000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.130000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.130000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.130000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.130000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.130000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.130000 audit[3564]: AVC avc: denied { bpf } for pid=3564 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.130000 audit: BPF prog-id=148 op=LOAD Jul 10 01:06:37.130000 audit[3564]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffca3ef4150 a2=94 a3=7ffca3ef4330 items=0 ppid=3488 pid=3564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.130000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 01:06:37.130000 audit: BPF prog-id=148 op=UNLOAD Jul 10 01:06:37.130000 audit[3564]: AVC avc: denied { perfmon } for pid=3564 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.130000 audit[3564]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffca3ef4220 a2=50 a3=a000000085 items=0 ppid=3488 pid=3564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.130000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 01:06:37.134000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.134000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.134000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.134000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.134000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.134000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.134000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.134000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.134000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.134000 audit: BPF prog-id=149 op=LOAD Jul 10 01:06:37.134000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc9f1296a0 a2=98 a3=3 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.134000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.135000 audit: BPF prog-id=149 op=UNLOAD Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit: BPF prog-id=150 op=LOAD Jul 10 01:06:37.141000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc9f129490 a2=94 a3=54428f items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.141000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.141000 audit: BPF prog-id=150 op=UNLOAD Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.141000 audit: BPF prog-id=151 op=LOAD Jul 10 01:06:37.141000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc9f1294c0 a2=94 a3=2 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.141000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.141000 audit: BPF prog-id=151 op=UNLOAD Jul 10 01:06:37.232000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.232000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.232000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.232000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.232000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.232000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.232000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.232000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.232000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.232000 audit: BPF prog-id=152 op=LOAD Jul 10 01:06:37.232000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffc9f129380 a2=94 a3=1 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.232000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.232000 audit: BPF prog-id=152 op=UNLOAD Jul 10 01:06:37.232000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.232000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffc9f129450 a2=50 a3=7ffc9f129530 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.232000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.240000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.240000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc9f129390 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.240000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.240000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.240000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc9f1293c0 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.240000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc9f1292d0 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc9f1293e0 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc9f1293c0 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc9f1293b0 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc9f1293e0 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc9f1293c0 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc9f1293e0 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc9f1293b0 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffc9f129420 a2=28 a3=0 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc9f1291d0 a2=50 a3=1 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit: BPF prog-id=153 op=LOAD Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc9f1291d0 a2=94 a3=5 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit: BPF prog-id=153 op=UNLOAD Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffc9f129280 a2=50 a3=1 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffc9f1293a0 a2=4 a3=38 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { confidentiality } for pid=3565 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc9f1293f0 a2=94 a3=6 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { confidentiality } for pid=3565 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc9f128ba0 a2=94 a3=88 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { perfmon } for pid=3565 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { bpf } for pid=3565 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.241000 audit[3565]: AVC avc: denied { confidentiality } for pid=3565 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:06:37.241000 audit[3565]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffc9f128ba0 a2=94 a3=88 items=0 ppid=3488 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.241000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit: BPF prog-id=154 op=LOAD Jul 10 01:06:37.249000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd7e9122e0 a2=98 a3=1999999999999999 items=0 ppid=3488 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.249000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 01:06:37.249000 audit: BPF prog-id=154 op=UNLOAD Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit: BPF prog-id=155 op=LOAD Jul 10 01:06:37.249000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd7e9121c0 a2=94 a3=ffff items=0 ppid=3488 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.249000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 01:06:37.249000 audit: BPF prog-id=155 op=UNLOAD Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.249000 audit: BPF prog-id=156 op=LOAD Jul 10 01:06:37.249000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd7e912200 a2=94 a3=7ffd7e9123e0 items=0 ppid=3488 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.249000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 01:06:37.249000 audit: BPF prog-id=156 op=UNLOAD Jul 10 01:06:37.348730 systemd-networkd[1063]: vxlan.calico: Link UP Jul 10 01:06:37.348735 systemd-networkd[1063]: vxlan.calico: Gained carrier Jul 10 01:06:37.377000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.377000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.377000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.377000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.377000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.377000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.377000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.377000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.377000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.377000 audit: BPF prog-id=157 op=LOAD Jul 10 01:06:37.377000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd46f93b00 a2=98 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.377000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.377000 audit: BPF prog-id=157 op=UNLOAD Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit: BPF prog-id=158 op=LOAD Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd46f93910 a2=94 a3=54428f items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit: BPF prog-id=158 op=UNLOAD Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit: BPF prog-id=159 op=LOAD Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd46f93940 a2=94 a3=2 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit: BPF prog-id=159 op=UNLOAD Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd46f93810 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd46f93840 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd46f93750 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd46f93860 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd46f93840 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd46f93830 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd46f93860 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd46f93840 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd46f93860 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd46f93830 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd46f938a0 a2=28 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit: BPF prog-id=160 op=LOAD Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd46f93710 a2=94 a3=0 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.381000 audit: BPF prog-id=160 op=UNLOAD Jul 10 01:06:37.381000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.381000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffd46f93700 a2=50 a3=2800 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.381000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.382000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.382000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffd46f93700 a2=50 a3=2800 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.382000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit: BPF prog-id=161 op=LOAD Jul 10 01:06:37.383000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd46f92f20 a2=94 a3=2 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.383000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.383000 audit: BPF prog-id=161 op=UNLOAD Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { perfmon } for pid=3612 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit[3612]: AVC avc: denied { bpf } for pid=3612 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.383000 audit: BPF prog-id=162 op=LOAD Jul 10 01:06:37.383000 audit[3612]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd46f93020 a2=94 a3=30 items=0 ppid=3488 pid=3612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.383000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit: BPF prog-id=163 op=LOAD Jul 10 01:06:37.387000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffcc52da070 a2=98 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.387000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.387000 audit: BPF prog-id=163 op=UNLOAD Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit: BPF prog-id=164 op=LOAD Jul 10 01:06:37.387000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcc52d9e60 a2=94 a3=54428f items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.387000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.387000 audit: BPF prog-id=164 op=UNLOAD Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.387000 audit: BPF prog-id=165 op=LOAD Jul 10 01:06:37.387000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcc52d9e90 a2=94 a3=2 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.387000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.387000 audit: BPF prog-id=165 op=UNLOAD Jul 10 01:06:37.530000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.530000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.530000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.530000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.530000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.530000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.530000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.530000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.530000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.530000 audit: BPF prog-id=166 op=LOAD Jul 10 01:06:37.530000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffcc52d9d50 a2=94 a3=1 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.530000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.531000 audit: BPF prog-id=166 op=UNLOAD Jul 10 01:06:37.531000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.531000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffcc52d9e20 a2=50 a3=7ffcc52d9f00 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.531000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.538000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.538000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc52d9d60 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.538000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.538000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.538000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcc52d9d90 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.538000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.538000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.538000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcc52d9ca0 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.538000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.538000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.538000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc52d9db0 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.538000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.538000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.538000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc52d9d90 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.538000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc52d9d80 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc52d9db0 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcc52d9d90 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcc52d9db0 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffcc52d9d80 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffcc52d9df0 a2=28 a3=0 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffcc52d9ba0 a2=50 a3=1 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.539000 audit: BPF prog-id=167 op=LOAD Jul 10 01:06:37.539000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffcc52d9ba0 a2=94 a3=5 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.539000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.540000 audit: BPF prog-id=167 op=UNLOAD Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffcc52d9c50 a2=50 a3=1 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.540000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffcc52d9d70 a2=4 a3=38 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.540000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { confidentiality } for pid=3614 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:06:37.540000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffcc52d9dc0 a2=94 a3=6 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.540000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { confidentiality } for pid=3614 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:06:37.540000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffcc52d9570 a2=94 a3=88 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.540000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { perfmon } for pid=3614 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { confidentiality } for pid=3614 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:06:37.540000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffcc52d9570 a2=94 a3=88 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.540000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.540000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.540000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffcc52dafa0 a2=10 a3=f8f00800 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.540000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.541000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.541000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffcc52dae40 a2=10 a3=3 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.541000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.541000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.541000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffcc52dade0 a2=10 a3=3 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.541000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.541000 audit[3614]: AVC avc: denied { bpf } for pid=3614 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:37.541000 audit[3614]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffcc52dade0 a2=10 a3=7 items=0 ppid=3488 pid=3614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.541000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:06:37.546000 audit: BPF prog-id=162 op=UNLOAD Jul 10 01:06:37.603000 audit[3652]: NETFILTER_CFG table=mangle:99 family=2 entries=16 op=nft_register_chain pid=3652 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:37.603000 audit[3652]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff430c17c0 a2=0 a3=7fff430c17ac items=0 ppid=3488 pid=3652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.603000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:37.615000 audit[3649]: NETFILTER_CFG table=nat:100 family=2 entries=15 op=nft_register_chain pid=3649 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:37.615000 audit[3649]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fff1346f790 a2=0 a3=7fff1346f77c items=0 ppid=3488 pid=3649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.615000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:37.627000 audit[3651]: NETFILTER_CFG table=raw:101 family=2 entries=21 op=nft_register_chain pid=3651 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:37.627000 audit[3651]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7fff0b83fd30 a2=0 a3=7fff0b83fd1c items=0 ppid=3488 pid=3651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.627000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:37.630000 audit[3650]: NETFILTER_CFG table=filter:102 family=2 entries=94 op=nft_register_chain pid=3650 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:37.630000 audit[3650]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7fff5822d600 a2=0 a3=55ca34f8e000 items=0 ppid=3488 pid=3650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:37.630000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:37.901339 systemd-networkd[1063]: cali3f394b01a11: Gained IPv6LL Jul 10 01:06:38.108804 env[1246]: time="2025-07-10T01:06:38.108775588Z" level=info msg="StopPodSandbox for \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\"" Jul 10 01:06:38.109359 env[1246]: time="2025-07-10T01:06:38.108940338Z" level=info msg="StopPodSandbox for \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\"" Jul 10 01:06:38.109761 env[1246]: time="2025-07-10T01:06:38.108982520Z" level=info msg="StopPodSandbox for \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\"" Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.196 [INFO][3697] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.196 [INFO][3697] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" iface="eth0" netns="/var/run/netns/cni-a0cc1ae1-e443-f2c3-240c-cf9fe293489f" Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.196 [INFO][3697] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" iface="eth0" netns="/var/run/netns/cni-a0cc1ae1-e443-f2c3-240c-cf9fe293489f" Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.196 [INFO][3697] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" iface="eth0" netns="/var/run/netns/cni-a0cc1ae1-e443-f2c3-240c-cf9fe293489f" Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.196 [INFO][3697] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.196 [INFO][3697] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.230 [INFO][3715] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" HandleID="k8s-pod-network.f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.231 [INFO][3715] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.231 [INFO][3715] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.235 [WARNING][3715] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" HandleID="k8s-pod-network.f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.235 [INFO][3715] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" HandleID="k8s-pod-network.f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.236 [INFO][3715] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:38.241262 env[1246]: 2025-07-10 01:06:38.240 [INFO][3697] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:06:38.243897 env[1246]: time="2025-07-10T01:06:38.243271061Z" level=info msg="TearDown network for sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\" successfully" Jul 10 01:06:38.243897 env[1246]: time="2025-07-10T01:06:38.243291474Z" level=info msg="StopPodSandbox for \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\" returns successfully" Jul 10 01:06:38.242793 systemd[1]: run-netns-cni\x2da0cc1ae1\x2de443\x2df2c3\x2d240c\x2dcf9fe293489f.mount: Deactivated successfully. Jul 10 01:06:38.244231 env[1246]: time="2025-07-10T01:06:38.244215546Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c7878fddc-z4gjh,Uid:286d1b36-f2b8-4812-b1e3-9fca1cab12f4,Namespace:calico-apiserver,Attempt:1,}" Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.218 [INFO][3698] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.219 [INFO][3698] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" iface="eth0" netns="/var/run/netns/cni-d53b4d4f-78a8-2418-f1d0-78f56b00eed0" Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.219 [INFO][3698] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" iface="eth0" netns="/var/run/netns/cni-d53b4d4f-78a8-2418-f1d0-78f56b00eed0" Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.219 [INFO][3698] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" iface="eth0" netns="/var/run/netns/cni-d53b4d4f-78a8-2418-f1d0-78f56b00eed0" Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.219 [INFO][3698] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.219 [INFO][3698] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.260 [INFO][3726] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" HandleID="k8s-pod-network.a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.260 [INFO][3726] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.260 [INFO][3726] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.267 [WARNING][3726] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" HandleID="k8s-pod-network.a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.268 [INFO][3726] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" HandleID="k8s-pod-network.a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.268 [INFO][3726] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:38.277454 env[1246]: 2025-07-10 01:06:38.271 [INFO][3698] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:06:38.279748 env[1246]: time="2025-07-10T01:06:38.279419360Z" level=info msg="TearDown network for sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\" successfully" Jul 10 01:06:38.279748 env[1246]: time="2025-07-10T01:06:38.279443353Z" level=info msg="StopPodSandbox for \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\" returns successfully" Jul 10 01:06:38.278940 systemd[1]: run-netns-cni\x2dd53b4d4f\x2d78a8\x2d2418\x2df1d0\x2d78f56b00eed0.mount: Deactivated successfully. Jul 10 01:06:38.280362 env[1246]: time="2025-07-10T01:06:38.280223178Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6999bb78bb-w7jtd,Uid:f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79,Namespace:calico-apiserver,Attempt:1,}" Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.214 [INFO][3694] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.215 [INFO][3694] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" iface="eth0" netns="/var/run/netns/cni-5142d65d-38f6-5960-2e57-a5dd6a63b989" Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.215 [INFO][3694] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" iface="eth0" netns="/var/run/netns/cni-5142d65d-38f6-5960-2e57-a5dd6a63b989" Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.215 [INFO][3694] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" iface="eth0" netns="/var/run/netns/cni-5142d65d-38f6-5960-2e57-a5dd6a63b989" Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.215 [INFO][3694] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.215 [INFO][3694] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.269 [INFO][3721] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" HandleID="k8s-pod-network.b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.269 [INFO][3721] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.269 [INFO][3721] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.273 [WARNING][3721] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" HandleID="k8s-pod-network.b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.273 [INFO][3721] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" HandleID="k8s-pod-network.b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.276 [INFO][3721] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:38.282383 env[1246]: 2025-07-10 01:06:38.280 [INFO][3694] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:06:38.282796 env[1246]: time="2025-07-10T01:06:38.282780762Z" level=info msg="TearDown network for sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\" successfully" Jul 10 01:06:38.282858 env[1246]: time="2025-07-10T01:06:38.282846522Z" level=info msg="StopPodSandbox for \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\" returns successfully" Jul 10 01:06:38.283146 env[1246]: time="2025-07-10T01:06:38.283120639Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c7878fddc-hxlk4,Uid:86db2015-705f-4be8-a79f-2635acd70c3f,Namespace:calico-apiserver,Attempt:1,}" Jul 10 01:06:38.401017 systemd-networkd[1063]: cali63e8892b9d8: Link UP Jul 10 01:06:38.403161 systemd-networkd[1063]: cali63e8892b9d8: Gained carrier Jul 10 01:06:38.403250 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali63e8892b9d8: link becomes ready Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.308 [INFO][3732] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0 calico-apiserver-c7878fddc- calico-apiserver 286d1b36-f2b8-4812-b1e3-9fca1cab12f4 922 0 2025-07-10 01:06:07 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:c7878fddc projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-c7878fddc-z4gjh eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali63e8892b9d8 [] [] }} ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-z4gjh" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.308 [INFO][3732] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-z4gjh" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.359 [INFO][3768] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.359 [INFO][3768] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-c7878fddc-z4gjh", "timestamp":"2025-07-10 01:06:38.359446806 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.359 [INFO][3768] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.359 [INFO][3768] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.359 [INFO][3768] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.364 [INFO][3768] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" host="localhost" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.366 [INFO][3768] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.377 [INFO][3768] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.378 [INFO][3768] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.380 [INFO][3768] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.380 [INFO][3768] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" host="localhost" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.381 [INFO][3768] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7 Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.384 [INFO][3768] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" host="localhost" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.391 [INFO][3768] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" host="localhost" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.391 [INFO][3768] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" host="localhost" Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.391 [INFO][3768] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:38.418025 env[1246]: 2025-07-10 01:06:38.391 [INFO][3768] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:06:38.419122 env[1246]: 2025-07-10 01:06:38.394 [INFO][3732] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-z4gjh" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0", GenerateName:"calico-apiserver-c7878fddc-", Namespace:"calico-apiserver", SelfLink:"", UID:"286d1b36-f2b8-4812-b1e3-9fca1cab12f4", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c7878fddc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-c7878fddc-z4gjh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali63e8892b9d8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:38.419122 env[1246]: 2025-07-10 01:06:38.394 [INFO][3732] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-z4gjh" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:06:38.419122 env[1246]: 2025-07-10 01:06:38.394 [INFO][3732] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali63e8892b9d8 ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-z4gjh" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:06:38.419122 env[1246]: 2025-07-10 01:06:38.403 [INFO][3732] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-z4gjh" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:06:38.419122 env[1246]: 2025-07-10 01:06:38.403 [INFO][3732] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-z4gjh" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0", GenerateName:"calico-apiserver-c7878fddc-", Namespace:"calico-apiserver", SelfLink:"", UID:"286d1b36-f2b8-4812-b1e3-9fca1cab12f4", ResourceVersion:"922", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c7878fddc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7", Pod:"calico-apiserver-c7878fddc-z4gjh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali63e8892b9d8", MAC:"ca:3f:1c:75:01:43", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:38.419122 env[1246]: 2025-07-10 01:06:38.414 [INFO][3732] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-z4gjh" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:06:38.442589 env[1246]: time="2025-07-10T01:06:38.442468134Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:38.442589 env[1246]: time="2025-07-10T01:06:38.442496743Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:38.442589 env[1246]: time="2025-07-10T01:06:38.442505327Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:38.442728 env[1246]: time="2025-07-10T01:06:38.442662637Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7 pid=3805 runtime=io.containerd.runc.v2 Jul 10 01:06:38.472456 systemd[1]: Started cri-containerd-8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7.scope. Jul 10 01:06:38.483681 systemd[1]: run-netns-cni\x2d5142d65d\x2d38f6\x2d5960\x2d2e57\x2da5dd6a63b989.mount: Deactivated successfully. Jul 10 01:06:38.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.506000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.506000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit: BPF prog-id=168 op=LOAD Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3805 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861623562383233366237666262376436303930636631353039636365 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3805 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861623562383233366237666262376436303930636631353039636365 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit: BPF prog-id=169 op=LOAD Jul 10 01:06:38.507000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003cca00 items=0 ppid=3805 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861623562383233366237666262376436303930636631353039636365 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit: BPF prog-id=170 op=LOAD Jul 10 01:06:38.507000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003cca48 items=0 ppid=3805 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861623562383233366237666262376436303930636631353039636365 Jul 10 01:06:38.507000 audit: BPF prog-id=170 op=UNLOAD Jul 10 01:06:38.507000 audit: BPF prog-id=169 op=UNLOAD Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { perfmon } for pid=3814 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit[3814]: AVC avc: denied { bpf } for pid=3814 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.507000 audit: BPF prog-id=171 op=LOAD Jul 10 01:06:38.507000 audit[3814]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003cce58 items=0 ppid=3805 pid=3814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.507000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861623562383233366237666262376436303930636631353039636365 Jul 10 01:06:38.509490 systemd-resolved[1196]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:06:38.520562 systemd-networkd[1063]: cali3bc7a0258af: Link UP Jul 10 01:06:38.522507 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3bc7a0258af: link becomes ready Jul 10 01:06:38.522376 systemd-networkd[1063]: cali3bc7a0258af: Gained carrier Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.333 [INFO][3747] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0 calico-apiserver-c7878fddc- calico-apiserver 86db2015-705f-4be8-a79f-2635acd70c3f 924 0 2025-07-10 01:06:07 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:c7878fddc projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-c7878fddc-hxlk4 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali3bc7a0258af [] [] }} ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-hxlk4" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.333 [INFO][3747] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-hxlk4" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.374 [INFO][3779] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.374 [INFO][3779] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd020), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-c7878fddc-hxlk4", "timestamp":"2025-07-10 01:06:38.3738914 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.374 [INFO][3779] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.391 [INFO][3779] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.391 [INFO][3779] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.474 [INFO][3779] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" host="localhost" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.478 [INFO][3779] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.491 [INFO][3779] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.494 [INFO][3779] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.498 [INFO][3779] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.498 [INFO][3779] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" host="localhost" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.499 [INFO][3779] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5 Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.506 [INFO][3779] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" host="localhost" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.511 [INFO][3779] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" host="localhost" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.511 [INFO][3779] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" host="localhost" Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.511 [INFO][3779] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:38.538247 env[1246]: 2025-07-10 01:06:38.511 [INFO][3779] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:06:38.548571 env[1246]: 2025-07-10 01:06:38.514 [INFO][3747] cni-plugin/k8s.go 418: Populated endpoint ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-hxlk4" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0", GenerateName:"calico-apiserver-c7878fddc-", Namespace:"calico-apiserver", SelfLink:"", UID:"86db2015-705f-4be8-a79f-2635acd70c3f", ResourceVersion:"924", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c7878fddc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-c7878fddc-hxlk4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3bc7a0258af", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:38.548571 env[1246]: 2025-07-10 01:06:38.514 [INFO][3747] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-hxlk4" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:06:38.548571 env[1246]: 2025-07-10 01:06:38.514 [INFO][3747] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3bc7a0258af ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-hxlk4" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:06:38.548571 env[1246]: 2025-07-10 01:06:38.522 [INFO][3747] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-hxlk4" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:06:38.548571 env[1246]: 2025-07-10 01:06:38.526 [INFO][3747] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-hxlk4" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0", GenerateName:"calico-apiserver-c7878fddc-", Namespace:"calico-apiserver", SelfLink:"", UID:"86db2015-705f-4be8-a79f-2635acd70c3f", ResourceVersion:"924", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c7878fddc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5", Pod:"calico-apiserver-c7878fddc-hxlk4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3bc7a0258af", MAC:"e6:e5:fb:7e:6e:5f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:38.548571 env[1246]: 2025-07-10 01:06:38.535 [INFO][3747] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Namespace="calico-apiserver" Pod="calico-apiserver-c7878fddc-hxlk4" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:06:38.570000 audit[3854]: NETFILTER_CFG table=filter:103 family=2 entries=50 op=nft_register_chain pid=3854 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:38.570000 audit[3854]: SYSCALL arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7ffd910adac0 a2=0 a3=7ffd910adaac items=0 ppid=3488 pid=3854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.570000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:38.573104 env[1246]: time="2025-07-10T01:06:38.573080782Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c7878fddc-z4gjh,Uid:286d1b36-f2b8-4812-b1e3-9fca1cab12f4,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\"" Jul 10 01:06:38.584558 env[1246]: time="2025-07-10T01:06:38.584509073Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:38.584729 env[1246]: time="2025-07-10T01:06:38.584676638Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:38.584729 env[1246]: time="2025-07-10T01:06:38.584691045Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:38.585301 env[1246]: time="2025-07-10T01:06:38.585276359Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5 pid=3855 runtime=io.containerd.runc.v2 Jul 10 01:06:38.606000 audit[3869]: NETFILTER_CFG table=filter:104 family=2 entries=47 op=nft_register_chain pid=3869 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:38.606000 audit[3869]: SYSCALL arch=c000003e syscall=46 success=yes exit=25928 a0=3 a1=7ffc080f6ff0 a2=0 a3=7ffc080f6fdc items=0 ppid=3488 pid=3869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.606000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:38.617430 systemd-networkd[1063]: cali00edc62a2de: Link UP Jul 10 01:06:38.619603 systemd-networkd[1063]: cali00edc62a2de: Gained carrier Jul 10 01:06:38.620865 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali00edc62a2de: link becomes ready Jul 10 01:06:38.640917 systemd[1]: Started cri-containerd-24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5.scope. Jul 10 01:06:38.644602 systemd[1]: run-containerd-runc-k8s.io-24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5-runc.6kj93d.mount: Deactivated successfully. Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.345 [INFO][3757] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0 calico-apiserver-6999bb78bb- calico-apiserver f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79 923 0 2025-07-10 01:06:08 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6999bb78bb projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6999bb78bb-w7jtd eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali00edc62a2de [] [] }} ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Namespace="calico-apiserver" Pod="calico-apiserver-6999bb78bb-w7jtd" WorkloadEndpoint="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.345 [INFO][3757] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Namespace="calico-apiserver" Pod="calico-apiserver-6999bb78bb-w7jtd" WorkloadEndpoint="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.382 [INFO][3778] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" HandleID="k8s-pod-network.1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.382 [INFO][3778] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" HandleID="k8s-pod-network.1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5950), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6999bb78bb-w7jtd", "timestamp":"2025-07-10 01:06:38.382173892 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.382 [INFO][3778] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.511 [INFO][3778] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.511 [INFO][3778] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.574 [INFO][3778] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" host="localhost" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.578 [INFO][3778] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.582 [INFO][3778] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.583 [INFO][3778] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.585 [INFO][3778] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.585 [INFO][3778] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" host="localhost" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.587 [INFO][3778] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717 Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.592 [INFO][3778] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" host="localhost" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.604 [INFO][3778] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" host="localhost" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.604 [INFO][3778] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" host="localhost" Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.606 [INFO][3778] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:38.647406 env[1246]: 2025-07-10 01:06:38.606 [INFO][3778] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" HandleID="k8s-pod-network.1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:06:38.647851 env[1246]: 2025-07-10 01:06:38.609 [INFO][3757] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Namespace="calico-apiserver" Pod="calico-apiserver-6999bb78bb-w7jtd" WorkloadEndpoint="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0", GenerateName:"calico-apiserver-6999bb78bb-", Namespace:"calico-apiserver", SelfLink:"", UID:"f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6999bb78bb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6999bb78bb-w7jtd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali00edc62a2de", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:38.647851 env[1246]: 2025-07-10 01:06:38.609 [INFO][3757] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Namespace="calico-apiserver" Pod="calico-apiserver-6999bb78bb-w7jtd" WorkloadEndpoint="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:06:38.647851 env[1246]: 2025-07-10 01:06:38.609 [INFO][3757] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali00edc62a2de ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Namespace="calico-apiserver" Pod="calico-apiserver-6999bb78bb-w7jtd" WorkloadEndpoint="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:06:38.647851 env[1246]: 2025-07-10 01:06:38.620 [INFO][3757] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Namespace="calico-apiserver" Pod="calico-apiserver-6999bb78bb-w7jtd" WorkloadEndpoint="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:06:38.647851 env[1246]: 2025-07-10 01:06:38.620 [INFO][3757] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Namespace="calico-apiserver" Pod="calico-apiserver-6999bb78bb-w7jtd" WorkloadEndpoint="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0", GenerateName:"calico-apiserver-6999bb78bb-", Namespace:"calico-apiserver", SelfLink:"", UID:"f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79", ResourceVersion:"923", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6999bb78bb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717", Pod:"calico-apiserver-6999bb78bb-w7jtd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali00edc62a2de", MAC:"9a:50:cb:c3:f9:1e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:38.647851 env[1246]: 2025-07-10 01:06:38.639 [INFO][3757] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717" Namespace="calico-apiserver" Pod="calico-apiserver-6999bb78bb-w7jtd" WorkloadEndpoint="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:06:38.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit: BPF prog-id=172 op=LOAD Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3855 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234636566313435643531386232363536623132323166373663336537 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3855 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234636566313435643531386232363536623132323166373663336537 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit: BPF prog-id=173 op=LOAD Jul 10 01:06:38.665000 audit[3870]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00033ea00 items=0 ppid=3855 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234636566313435643531386232363536623132323166373663336537 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit: BPF prog-id=174 op=LOAD Jul 10 01:06:38.665000 audit[3870]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00033ea48 items=0 ppid=3855 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234636566313435643531386232363536623132323166373663336537 Jul 10 01:06:38.665000 audit: BPF prog-id=174 op=UNLOAD Jul 10 01:06:38.665000 audit: BPF prog-id=173 op=UNLOAD Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.665000 audit: BPF prog-id=175 op=LOAD Jul 10 01:06:38.665000 audit[3870]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00033ee58 items=0 ppid=3855 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234636566313435643531386232363536623132323166373663336537 Jul 10 01:06:38.668000 audit[3894]: NETFILTER_CFG table=filter:105 family=2 entries=41 op=nft_register_chain pid=3894 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:38.668000 audit[3894]: SYSCALL arch=c000003e syscall=46 success=yes exit=23060 a0=3 a1=7ffed2edd830 a2=0 a3=7ffed2edd81c items=0 ppid=3488 pid=3894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.668000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:38.672448 systemd-resolved[1196]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:06:38.675527 env[1246]: time="2025-07-10T01:06:38.675490991Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:38.675597 env[1246]: time="2025-07-10T01:06:38.675537493Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:38.675597 env[1246]: time="2025-07-10T01:06:38.675553157Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:38.675645 env[1246]: time="2025-07-10T01:06:38.675633072Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717 pid=3902 runtime=io.containerd.runc.v2 Jul 10 01:06:38.685413 systemd[1]: Started cri-containerd-1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717.scope. Jul 10 01:06:38.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit: BPF prog-id=176 op=LOAD Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3902 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166363638623933623033633730613536333762383436363063333734 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3902 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166363638623933623033633730613536333762383436363063333734 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit: BPF prog-id=177 op=LOAD Jul 10 01:06:38.696000 audit[3913]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003091a0 items=0 ppid=3902 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166363638623933623033633730613536333762383436363063333734 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit: BPF prog-id=178 op=LOAD Jul 10 01:06:38.696000 audit[3913]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003091e8 items=0 ppid=3902 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166363638623933623033633730613536333762383436363063333734 Jul 10 01:06:38.696000 audit: BPF prog-id=178 op=UNLOAD Jul 10 01:06:38.696000 audit: BPF prog-id=177 op=UNLOAD Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { perfmon } for pid=3913 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit[3913]: AVC avc: denied { bpf } for pid=3913 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.696000 audit: BPF prog-id=179 op=LOAD Jul 10 01:06:38.696000 audit[3913]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003095f8 items=0 ppid=3902 pid=3913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.696000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166363638623933623033633730613536333762383436363063333734 Jul 10 01:06:38.703662 systemd-resolved[1196]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:06:38.743836 env[1246]: time="2025-07-10T01:06:38.743809153Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-c7878fddc-hxlk4,Uid:86db2015-705f-4be8-a79f-2635acd70c3f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\"" Jul 10 01:06:38.746449 env[1246]: time="2025-07-10T01:06:38.746412241Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6999bb78bb-w7jtd,Uid:f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717\"" Jul 10 01:06:38.767231 env[1246]: time="2025-07-10T01:06:38.765428258Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:38.768499 env[1246]: time="2025-07-10T01:06:38.768483902Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:38.770239 env[1246]: time="2025-07-10T01:06:38.770225394Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:38.771718 env[1246]: time="2025-07-10T01:06:38.771701148Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:38.772582 env[1246]: time="2025-07-10T01:06:38.772176223Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 10 01:06:38.773498 env[1246]: time="2025-07-10T01:06:38.773480742Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 01:06:38.774607 env[1246]: time="2025-07-10T01:06:38.774590521Z" level=info msg="CreateContainer within sandbox \"394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 10 01:06:38.796020 env[1246]: time="2025-07-10T01:06:38.795988857Z" level=info msg="CreateContainer within sandbox \"394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"c2d0cdc9a97c5ba3c66321eef26715709310402fb786b80b7df60d74af55183e\"" Jul 10 01:06:38.796525 env[1246]: time="2025-07-10T01:06:38.796460148Z" level=info msg="StartContainer for \"c2d0cdc9a97c5ba3c66321eef26715709310402fb786b80b7df60d74af55183e\"" Jul 10 01:06:38.807258 systemd[1]: Started cri-containerd-c2d0cdc9a97c5ba3c66321eef26715709310402fb786b80b7df60d74af55183e.scope. Jul 10 01:06:38.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.822000 audit: BPF prog-id=180 op=LOAD Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3432 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332643063646339613937633562613363363633323165656632363731 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3432 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332643063646339613937633562613363363633323165656632363731 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit: BPF prog-id=181 op=LOAD Jul 10 01:06:38.823000 audit[3948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024a80 items=0 ppid=3432 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332643063646339613937633562613363363633323165656632363731 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit: BPF prog-id=182 op=LOAD Jul 10 01:06:38.823000 audit[3948]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024ac8 items=0 ppid=3432 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332643063646339613937633562613363363633323165656632363731 Jul 10 01:06:38.823000 audit: BPF prog-id=182 op=UNLOAD Jul 10 01:06:38.823000 audit: BPF prog-id=181 op=UNLOAD Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:38.823000 audit: BPF prog-id=183 op=LOAD Jul 10 01:06:38.823000 audit[3948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024ed8 items=0 ppid=3432 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:38.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332643063646339613937633562613363363633323165656632363731 Jul 10 01:06:38.846208 env[1246]: time="2025-07-10T01:06:38.845326515Z" level=info msg="StartContainer for \"c2d0cdc9a97c5ba3c66321eef26715709310402fb786b80b7df60d74af55183e\" returns successfully" Jul 10 01:06:38.878000 audit[3961]: AVC avc: denied { search } for pid=3961 comm="nginx" name="crypto" dev="proc" ino=40004 scontext=system_u:system_r:svirt_lxc_net_t:s0:c577,c795 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 10 01:06:38.878000 audit[3961]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7fb774c14728 a2=0 a3=0 items=0 ppid=3432 pid=3961 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c577,c795 key=(null) Jul 10 01:06:38.878000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 10 01:06:38.924288 systemd-networkd[1063]: vxlan.calico: Gained IPv6LL Jul 10 01:06:39.104497 env[1246]: time="2025-07-10T01:06:39.104463000Z" level=info msg="StopPodSandbox for \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\"" Jul 10 01:06:39.104725 env[1246]: time="2025-07-10T01:06:39.104709555Z" level=info msg="StopPodSandbox for \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\"" Jul 10 01:06:39.104852 env[1246]: time="2025-07-10T01:06:39.104837083Z" level=info msg="StopPodSandbox for \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\"" Jul 10 01:06:39.110310 env[1246]: time="2025-07-10T01:06:39.104966353Z" level=info msg="StopPodSandbox for \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\"" Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.224 [INFO][4018] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.224 [INFO][4018] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" iface="eth0" netns="/var/run/netns/cni-7fd57daf-7727-c2e8-fd10-ced9fc621d64" Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.225 [INFO][4018] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" iface="eth0" netns="/var/run/netns/cni-7fd57daf-7727-c2e8-fd10-ced9fc621d64" Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.225 [INFO][4018] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" iface="eth0" netns="/var/run/netns/cni-7fd57daf-7727-c2e8-fd10-ced9fc621d64" Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.225 [INFO][4018] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.225 [INFO][4018] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.277 [INFO][4044] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" HandleID="k8s-pod-network.c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.278 [INFO][4044] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.278 [INFO][4044] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.312 [WARNING][4044] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" HandleID="k8s-pod-network.c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.312 [INFO][4044] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" HandleID="k8s-pod-network.c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.313 [INFO][4044] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:39.322427 env[1246]: 2025-07-10 01:06:39.316 [INFO][4018] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:06:39.330899 env[1246]: time="2025-07-10T01:06:39.322665312Z" level=info msg="TearDown network for sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\" successfully" Jul 10 01:06:39.330899 env[1246]: time="2025-07-10T01:06:39.322690697Z" level=info msg="StopPodSandbox for \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\" returns successfully" Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.192 [INFO][4020] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.196 [INFO][4020] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" iface="eth0" netns="/var/run/netns/cni-5743e7a1-03be-227e-30b7-0cd52b87eca1" Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.196 [INFO][4020] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" iface="eth0" netns="/var/run/netns/cni-5743e7a1-03be-227e-30b7-0cd52b87eca1" Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.215 [INFO][4020] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" iface="eth0" netns="/var/run/netns/cni-5743e7a1-03be-227e-30b7-0cd52b87eca1" Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.215 [INFO][4020] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.215 [INFO][4020] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.283 [INFO][4042] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" HandleID="k8s-pod-network.0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.283 [INFO][4042] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.313 [INFO][4042] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.320 [WARNING][4042] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" HandleID="k8s-pod-network.0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.320 [INFO][4042] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" HandleID="k8s-pod-network.0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.322 [INFO][4042] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:39.330899 env[1246]: 2025-07-10 01:06:39.324 [INFO][4020] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:06:39.330899 env[1246]: time="2025-07-10T01:06:39.326520036Z" level=info msg="TearDown network for sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\" successfully" Jul 10 01:06:39.330899 env[1246]: time="2025-07-10T01:06:39.326823053Z" level=info msg="StopPodSandbox for \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\" returns successfully" Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.227 [INFO][4017] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.228 [INFO][4017] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" iface="eth0" netns="/var/run/netns/cni-e66eb1c8-4fac-223a-c543-3c740c84107b" Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.228 [INFO][4017] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" iface="eth0" netns="/var/run/netns/cni-e66eb1c8-4fac-223a-c543-3c740c84107b" Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.228 [INFO][4017] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" iface="eth0" netns="/var/run/netns/cni-e66eb1c8-4fac-223a-c543-3c740c84107b" Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.228 [INFO][4017] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.228 [INFO][4017] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.286 [INFO][4053] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" HandleID="k8s-pod-network.7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.286 [INFO][4053] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.322 [INFO][4053] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.328 [WARNING][4053] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" HandleID="k8s-pod-network.7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.328 [INFO][4053] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" HandleID="k8s-pod-network.7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.329 [INFO][4053] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:39.333474 env[1246]: 2025-07-10 01:06:39.330 [INFO][4017] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:06:39.336536 env[1246]: time="2025-07-10T01:06:39.336461368Z" level=info msg="TearDown network for sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\" successfully" Jul 10 01:06:39.336536 env[1246]: time="2025-07-10T01:06:39.336485753Z" level=info msg="StopPodSandbox for \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\" returns successfully" Jul 10 01:06:39.338072 env[1246]: time="2025-07-10T01:06:39.337791677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-75d97f4747-nwdjf,Uid:a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3,Namespace:calico-system,Attempt:1,}" Jul 10 01:06:39.338168 env[1246]: time="2025-07-10T01:06:39.338152027Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-bxt4b,Uid:3180f4c6-8ed5-4a0a-af99-8b3974a06a57,Namespace:calico-system,Attempt:1,}" Jul 10 01:06:39.338603 env[1246]: time="2025-07-10T01:06:39.338586298Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qgl94,Uid:7799fe3e-a251-4686-9a72-4acdb4232475,Namespace:calico-system,Attempt:1,}" Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.227 [INFO][4019] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.228 [INFO][4019] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" iface="eth0" netns="/var/run/netns/cni-24f2b9d4-2532-46a1-f131-d364e7913a81" Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.228 [INFO][4019] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" iface="eth0" netns="/var/run/netns/cni-24f2b9d4-2532-46a1-f131-d364e7913a81" Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.229 [INFO][4019] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" iface="eth0" netns="/var/run/netns/cni-24f2b9d4-2532-46a1-f131-d364e7913a81" Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.229 [INFO][4019] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.229 [INFO][4019] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.310 [INFO][4054] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" HandleID="k8s-pod-network.bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.310 [INFO][4054] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.330 [INFO][4054] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.388 [WARNING][4054] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" HandleID="k8s-pod-network.bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.388 [INFO][4054] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" HandleID="k8s-pod-network.bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.400 [INFO][4054] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:39.417307 env[1246]: 2025-07-10 01:06:39.410 [INFO][4019] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:06:39.418083 env[1246]: time="2025-07-10T01:06:39.417740564Z" level=info msg="TearDown network for sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\" successfully" Jul 10 01:06:39.418083 env[1246]: time="2025-07-10T01:06:39.417761798Z" level=info msg="StopPodSandbox for \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\" returns successfully" Jul 10 01:06:39.419432 env[1246]: time="2025-07-10T01:06:39.419416945Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-vlpgt,Uid:3742d2bc-3ce5-4ffe-9879-3341b15e467d,Namespace:kube-system,Attempt:1,}" Jul 10 01:06:39.485298 systemd[1]: run-netns-cni\x2de66eb1c8\x2d4fac\x2d223a\x2dc543\x2d3c740c84107b.mount: Deactivated successfully. Jul 10 01:06:39.485351 systemd[1]: run-netns-cni\x2d7fd57daf\x2d7727\x2dc2e8\x2dfd10\x2dced9fc621d64.mount: Deactivated successfully. Jul 10 01:06:39.485383 systemd[1]: run-netns-cni\x2d24f2b9d4\x2d2532\x2d46a1\x2df131\x2dd364e7913a81.mount: Deactivated successfully. Jul 10 01:06:39.485417 systemd[1]: run-netns-cni\x2d5743e7a1\x2d03be\x2d227e\x2d30b7\x2d0cd52b87eca1.mount: Deactivated successfully. Jul 10 01:06:39.554173 systemd-networkd[1063]: calia75e40b7427: Link UP Jul 10 01:06:39.558183 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 01:06:39.558251 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia75e40b7427: link becomes ready Jul 10 01:06:39.558327 systemd-networkd[1063]: calia75e40b7427: Gained carrier Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.503 [INFO][4076] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0 calico-kube-controllers-75d97f4747- calico-system a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3 948 0 2025-07-10 01:06:10 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:75d97f4747 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-75d97f4747-nwdjf eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calia75e40b7427 [] [] }} ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Namespace="calico-system" Pod="calico-kube-controllers-75d97f4747-nwdjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.503 [INFO][4076] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Namespace="calico-system" Pod="calico-kube-controllers-75d97f4747-nwdjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.530 [INFO][4118] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" HandleID="k8s-pod-network.1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.530 [INFO][4118] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" HandleID="k8s-pod-network.1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccff0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-75d97f4747-nwdjf", "timestamp":"2025-07-10 01:06:39.53039629 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.530 [INFO][4118] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.530 [INFO][4118] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.530 [INFO][4118] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.534 [INFO][4118] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" host="localhost" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.536 [INFO][4118] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.539 [INFO][4118] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.540 [INFO][4118] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.541 [INFO][4118] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.541 [INFO][4118] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" host="localhost" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.542 [INFO][4118] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762 Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.546 [INFO][4118] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" host="localhost" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.550 [INFO][4118] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" host="localhost" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.550 [INFO][4118] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" host="localhost" Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.550 [INFO][4118] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:39.578606 env[1246]: 2025-07-10 01:06:39.551 [INFO][4118] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" HandleID="k8s-pod-network.1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:06:39.579392 env[1246]: 2025-07-10 01:06:39.552 [INFO][4076] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Namespace="calico-system" Pod="calico-kube-controllers-75d97f4747-nwdjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0", GenerateName:"calico-kube-controllers-75d97f4747-", Namespace:"calico-system", SelfLink:"", UID:"a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3", ResourceVersion:"948", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"75d97f4747", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-75d97f4747-nwdjf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia75e40b7427", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:39.579392 env[1246]: 2025-07-10 01:06:39.552 [INFO][4076] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Namespace="calico-system" Pod="calico-kube-controllers-75d97f4747-nwdjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:06:39.579392 env[1246]: 2025-07-10 01:06:39.552 [INFO][4076] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia75e40b7427 ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Namespace="calico-system" Pod="calico-kube-controllers-75d97f4747-nwdjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:06:39.579392 env[1246]: 2025-07-10 01:06:39.564 [INFO][4076] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Namespace="calico-system" Pod="calico-kube-controllers-75d97f4747-nwdjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:06:39.579392 env[1246]: 2025-07-10 01:06:39.564 [INFO][4076] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Namespace="calico-system" Pod="calico-kube-controllers-75d97f4747-nwdjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0", GenerateName:"calico-kube-controllers-75d97f4747-", Namespace:"calico-system", SelfLink:"", UID:"a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3", ResourceVersion:"948", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"75d97f4747", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762", Pod:"calico-kube-controllers-75d97f4747-nwdjf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia75e40b7427", MAC:"1a:d5:71:f3:72:c6", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:39.579392 env[1246]: 2025-07-10 01:06:39.571 [INFO][4076] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762" Namespace="calico-system" Pod="calico-kube-controllers-75d97f4747-nwdjf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:06:39.594000 audit[4151]: NETFILTER_CFG table=filter:106 family=2 entries=44 op=nft_register_chain pid=4151 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:39.594000 audit[4151]: SYSCALL arch=c000003e syscall=46 success=yes exit=21936 a0=3 a1=7ffd22b9f460 a2=0 a3=7ffd22b9f44c items=0 ppid=3488 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.594000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:39.628298 env[1246]: time="2025-07-10T01:06:39.627208928Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:39.628298 env[1246]: time="2025-07-10T01:06:39.627273966Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:39.628298 env[1246]: time="2025-07-10T01:06:39.627282248Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:39.628666 env[1246]: time="2025-07-10T01:06:39.628623305Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762 pid=4164 runtime=io.containerd.runc.v2 Jul 10 01:06:39.646674 systemd[1]: run-containerd-runc-k8s.io-1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762-runc.0uM3MT.mount: Deactivated successfully. Jul 10 01:06:39.657032 systemd[1]: Started cri-containerd-1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762.scope. Jul 10 01:06:39.677246 kernel: kauditd_printk_skb: 890 callbacks suppressed Jul 10 01:06:39.677325 kernel: audit: type=1400 audit(1752109599.672:1202): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.684944 kernel: audit: type=1400 audit(1752109599.672:1203): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.692351 kernel: audit: type=1400 audit(1752109599.672:1204): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.692383 kernel: audit: type=1400 audit(1752109599.672:1205): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.692400 kernel: audit: type=1400 audit(1752109599.672:1206): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.692415 kernel: audit: type=1400 audit(1752109599.672:1207): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.692428 kernel: audit: type=1400 audit(1752109599.672:1208): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.695890 systemd-resolved[1196]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:06:39.700847 kernel: audit: type=1400 audit(1752109599.672:1209): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.708202 kernel: audit: type=1400 audit(1752109599.672:1210): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.711730 systemd-networkd[1063]: cali4dffb4e89d4: Link UP Jul 10 01:06:39.713145 kernel: audit: type=1400 audit(1752109599.675:1211): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.716270 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4dffb4e89d4: link becomes ready Jul 10 01:06:39.675000 audit: BPF prog-id=184 op=LOAD Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4164 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139323334353566353832353366313864613532643361656430313337 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4164 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139323334353566353832353366313864613532643361656430313337 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.678000 audit: BPF prog-id=185 op=LOAD Jul 10 01:06:39.678000 audit[4174]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001b2ca0 items=0 ppid=4164 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139323334353566353832353366313864613532643361656430313337 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit: BPF prog-id=186 op=LOAD Jul 10 01:06:39.680000 audit[4174]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001b2ce8 items=0 ppid=4164 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139323334353566353832353366313864613532643361656430313337 Jul 10 01:06:39.680000 audit: BPF prog-id=186 op=UNLOAD Jul 10 01:06:39.680000 audit: BPF prog-id=185 op=UNLOAD Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { perfmon } for pid=4174 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit[4174]: AVC avc: denied { bpf } for pid=4174 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.680000 audit: BPF prog-id=187 op=LOAD Jul 10 01:06:39.680000 audit[4174]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0001b30f8 items=0 ppid=4164 pid=4174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139323334353566353832353366313864613532643361656430313337 Jul 10 01:06:39.713258 systemd-networkd[1063]: cali4dffb4e89d4: Gained carrier Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.498 [INFO][4070] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0 goldmane-58fd7646b9- calico-system 3180f4c6-8ed5-4a0a-af99-8b3974a06a57 947 0 2025-07-10 01:06:09 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-bxt4b eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali4dffb4e89d4 [] [] }} ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Namespace="calico-system" Pod="goldmane-58fd7646b9-bxt4b" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--bxt4b-" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.498 [INFO][4070] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Namespace="calico-system" Pod="goldmane-58fd7646b9-bxt4b" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.569 [INFO][4124] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" HandleID="k8s-pod-network.2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.569 [INFO][4124] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" HandleID="k8s-pod-network.2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad4a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-bxt4b", "timestamp":"2025-07-10 01:06:39.569343289 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.571 [INFO][4124] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.571 [INFO][4124] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.571 [INFO][4124] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.635 [INFO][4124] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" host="localhost" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.639 [INFO][4124] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.653 [INFO][4124] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.657 [INFO][4124] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.659 [INFO][4124] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.659 [INFO][4124] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" host="localhost" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.663 [INFO][4124] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.669 [INFO][4124] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" host="localhost" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.690 [INFO][4124] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" host="localhost" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.690 [INFO][4124] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" host="localhost" Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.690 [INFO][4124] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:39.733359 env[1246]: 2025-07-10 01:06:39.690 [INFO][4124] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" HandleID="k8s-pod-network.2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:06:39.736394 env[1246]: 2025-07-10 01:06:39.696 [INFO][4070] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Namespace="calico-system" Pod="goldmane-58fd7646b9-bxt4b" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"3180f4c6-8ed5-4a0a-af99-8b3974a06a57", ResourceVersion:"947", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-bxt4b", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali4dffb4e89d4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:39.736394 env[1246]: 2025-07-10 01:06:39.696 [INFO][4070] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Namespace="calico-system" Pod="goldmane-58fd7646b9-bxt4b" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:06:39.736394 env[1246]: 2025-07-10 01:06:39.696 [INFO][4070] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4dffb4e89d4 ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Namespace="calico-system" Pod="goldmane-58fd7646b9-bxt4b" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:06:39.736394 env[1246]: 2025-07-10 01:06:39.715 [INFO][4070] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Namespace="calico-system" Pod="goldmane-58fd7646b9-bxt4b" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:06:39.736394 env[1246]: 2025-07-10 01:06:39.715 [INFO][4070] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Namespace="calico-system" Pod="goldmane-58fd7646b9-bxt4b" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"3180f4c6-8ed5-4a0a-af99-8b3974a06a57", ResourceVersion:"947", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a", Pod:"goldmane-58fd7646b9-bxt4b", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali4dffb4e89d4", MAC:"5a:ce:c9:29:0d:4b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:39.736394 env[1246]: 2025-07-10 01:06:39.727 [INFO][4070] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a" Namespace="calico-system" Pod="goldmane-58fd7646b9-bxt4b" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:06:39.745834 env[1246]: time="2025-07-10T01:06:39.745810305Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-75d97f4747-nwdjf,Uid:a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3,Namespace:calico-system,Attempt:1,} returns sandbox id \"1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762\"" Jul 10 01:06:39.756000 audit[4209]: NETFILTER_CFG table=filter:107 family=2 entries=56 op=nft_register_chain pid=4209 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:39.756000 audit[4209]: SYSCALL arch=c000003e syscall=46 success=yes exit=28728 a0=3 a1=7ffcd234ade0 a2=0 a3=7ffcd234adcc items=0 ppid=3488 pid=4209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.756000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:39.767960 env[1246]: time="2025-07-10T01:06:39.767873041Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:39.768052 env[1246]: time="2025-07-10T01:06:39.767975404Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:39.768052 env[1246]: time="2025-07-10T01:06:39.767996165Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:39.768671 env[1246]: time="2025-07-10T01:06:39.768604904Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a pid=4215 runtime=io.containerd.runc.v2 Jul 10 01:06:39.778980 systemd[1]: Started cri-containerd-2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a.scope. Jul 10 01:06:39.794201 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif2227185092: link becomes ready Jul 10 01:06:39.793228 systemd-networkd[1063]: calif2227185092: Link UP Jul 10 01:06:39.793827 systemd-networkd[1063]: calif2227185092: Gained carrier Jul 10 01:06:39.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.799000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.799000 audit: BPF prog-id=188 op=LOAD Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4215 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265353364373933346236343832663361633237656132663334343835 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4215 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265353364373933346236343832663361633237656132663334343835 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit: BPF prog-id=189 op=LOAD Jul 10 01:06:39.804000 audit[4227]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00028f730 items=0 ppid=4215 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265353364373933346236343832663361633237656132663334343835 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.804000 audit: BPF prog-id=190 op=LOAD Jul 10 01:06:39.804000 audit[4227]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00028f778 items=0 ppid=4215 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265353364373933346236343832663361633237656132663334343835 Jul 10 01:06:39.805000 audit: BPF prog-id=190 op=UNLOAD Jul 10 01:06:39.805000 audit: BPF prog-id=189 op=UNLOAD Jul 10 01:06:39.805000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.805000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.805000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.805000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.805000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.805000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.805000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.805000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.805000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.805000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.805000 audit: BPF prog-id=191 op=LOAD Jul 10 01:06:39.805000 audit[4227]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00028fb88 items=0 ppid=4215 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.805000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265353364373933346236343832663361633237656132663334343835 Jul 10 01:06:39.813224 systemd-resolved[1196]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.518 [INFO][4085] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--qgl94-eth0 csi-node-driver- calico-system 7799fe3e-a251-4686-9a72-4acdb4232475 949 0 2025-07-10 01:06:10 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-qgl94 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calif2227185092 [] [] }} ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Namespace="calico-system" Pod="csi-node-driver-qgl94" WorkloadEndpoint="localhost-k8s-csi--node--driver--qgl94-" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.518 [INFO][4085] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Namespace="calico-system" Pod="csi-node-driver-qgl94" WorkloadEndpoint="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.574 [INFO][4132] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" HandleID="k8s-pod-network.88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.574 [INFO][4132] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" HandleID="k8s-pod-network.88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd020), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-qgl94", "timestamp":"2025-07-10 01:06:39.574154522 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.574 [INFO][4132] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.690 [INFO][4132] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.690 [INFO][4132] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.737 [INFO][4132] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" host="localhost" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.761 [INFO][4132] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.766 [INFO][4132] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.767 [INFO][4132] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.768 [INFO][4132] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.768 [INFO][4132] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" host="localhost" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.769 [INFO][4132] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149 Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.772 [INFO][4132] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" host="localhost" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.781 [INFO][4132] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" host="localhost" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.781 [INFO][4132] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" host="localhost" Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.781 [INFO][4132] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:39.813350 env[1246]: 2025-07-10 01:06:39.781 [INFO][4132] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" HandleID="k8s-pod-network.88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:06:39.814796 env[1246]: 2025-07-10 01:06:39.785 [INFO][4085] cni-plugin/k8s.go 418: Populated endpoint ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Namespace="calico-system" Pod="csi-node-driver-qgl94" WorkloadEndpoint="localhost-k8s-csi--node--driver--qgl94-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qgl94-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"7799fe3e-a251-4686-9a72-4acdb4232475", ResourceVersion:"949", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-qgl94", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif2227185092", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:39.814796 env[1246]: 2025-07-10 01:06:39.785 [INFO][4085] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Namespace="calico-system" Pod="csi-node-driver-qgl94" WorkloadEndpoint="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:06:39.814796 env[1246]: 2025-07-10 01:06:39.785 [INFO][4085] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif2227185092 ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Namespace="calico-system" Pod="csi-node-driver-qgl94" WorkloadEndpoint="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:06:39.814796 env[1246]: 2025-07-10 01:06:39.794 [INFO][4085] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Namespace="calico-system" Pod="csi-node-driver-qgl94" WorkloadEndpoint="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:06:39.814796 env[1246]: 2025-07-10 01:06:39.795 [INFO][4085] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Namespace="calico-system" Pod="csi-node-driver-qgl94" WorkloadEndpoint="localhost-k8s-csi--node--driver--qgl94-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qgl94-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"7799fe3e-a251-4686-9a72-4acdb4232475", ResourceVersion:"949", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149", Pod:"csi-node-driver-qgl94", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif2227185092", MAC:"26:e1:26:fa:7d:39", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:39.814796 env[1246]: 2025-07-10 01:06:39.805 [INFO][4085] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149" Namespace="calico-system" Pod="csi-node-driver-qgl94" WorkloadEndpoint="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:06:39.820347 systemd-networkd[1063]: cali63e8892b9d8: Gained IPv6LL Jul 10 01:06:39.820000 audit[4254]: NETFILTER_CFG table=filter:108 family=2 entries=52 op=nft_register_chain pid=4254 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:39.820000 audit[4254]: SYSCALL arch=c000003e syscall=46 success=yes exit=24312 a0=3 a1=7ffdd8d0e160 a2=0 a3=7ffdd8d0e14c items=0 ppid=3488 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.820000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:39.832117 env[1246]: time="2025-07-10T01:06:39.831970284Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:39.832117 env[1246]: time="2025-07-10T01:06:39.831997889Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:39.832117 env[1246]: time="2025-07-10T01:06:39.832010558Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:39.832293 env[1246]: time="2025-07-10T01:06:39.832099091Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149 pid=4262 runtime=io.containerd.runc.v2 Jul 10 01:06:39.845021 env[1246]: time="2025-07-10T01:06:39.844996716Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-bxt4b,Uid:3180f4c6-8ed5-4a0a-af99-8b3974a06a57,Namespace:calico-system,Attempt:1,} returns sandbox id \"2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a\"" Jul 10 01:06:39.849949 systemd[1]: Started cri-containerd-88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149.scope. Jul 10 01:06:39.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.860000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.860000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.860000 audit: BPF prog-id=192 op=LOAD Jul 10 01:06:39.861000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.861000 audit[4269]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4262 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838363330653662626431656663633366303666396564396338336162 Jul 10 01:06:39.861000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.861000 audit[4269]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4262 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.861000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838363330653662626431656663633366303666396564396338336162 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit: BPF prog-id=193 op=LOAD Jul 10 01:06:39.862000 audit[4269]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003540f0 items=0 ppid=4262 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838363330653662626431656663633366303666396564396338336162 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.862000 audit: BPF prog-id=194 op=LOAD Jul 10 01:06:39.862000 audit[4269]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000354138 items=0 ppid=4262 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838363330653662626431656663633366303666396564396338336162 Jul 10 01:06:39.863000 audit: BPF prog-id=194 op=UNLOAD Jul 10 01:06:39.863000 audit: BPF prog-id=193 op=UNLOAD Jul 10 01:06:39.863000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.863000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.863000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.863000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.863000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.863000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.863000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.863000 audit[4269]: AVC avc: denied { perfmon } for pid=4269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.863000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.863000 audit[4269]: AVC avc: denied { bpf } for pid=4269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.863000 audit: BPF prog-id=195 op=LOAD Jul 10 01:06:39.863000 audit[4269]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000354548 items=0 ppid=4262 pid=4269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838363330653662626431656663633366303666396564396338336162 Jul 10 01:06:39.867160 systemd-resolved[1196]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:06:39.878410 env[1246]: time="2025-07-10T01:06:39.878389003Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-qgl94,Uid:7799fe3e-a251-4686-9a72-4acdb4232475,Namespace:calico-system,Attempt:1,} returns sandbox id \"88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149\"" Jul 10 01:06:39.890382 systemd-networkd[1063]: cali904a33c6123: Link UP Jul 10 01:06:39.891207 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali904a33c6123: link becomes ready Jul 10 01:06:39.891289 systemd-networkd[1063]: cali904a33c6123: Gained carrier Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.534 [INFO][4106] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0 coredns-7c65d6cfc9- kube-system 3742d2bc-3ce5-4ffe-9879-3341b15e467d 950 0 2025-07-10 01:05:58 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-vlpgt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali904a33c6123 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vlpgt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vlpgt-" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.534 [INFO][4106] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vlpgt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.593 [INFO][4138] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" HandleID="k8s-pod-network.5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.594 [INFO][4138] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" HandleID="k8s-pod-network.5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5020), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-vlpgt", "timestamp":"2025-07-10 01:06:39.593930496 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.594 [INFO][4138] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.781 [INFO][4138] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.781 [INFO][4138] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.837 [INFO][4138] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" host="localhost" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.862 [INFO][4138] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.871 [INFO][4138] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.873 [INFO][4138] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.877 [INFO][4138] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.877 [INFO][4138] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" host="localhost" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.878 [INFO][4138] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1 Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.881 [INFO][4138] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" host="localhost" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.887 [INFO][4138] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" host="localhost" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.887 [INFO][4138] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" host="localhost" Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.887 [INFO][4138] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:39.905714 env[1246]: 2025-07-10 01:06:39.887 [INFO][4138] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" HandleID="k8s-pod-network.5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:06:39.906309 env[1246]: 2025-07-10 01:06:39.888 [INFO][4106] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vlpgt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3742d2bc-3ce5-4ffe-9879-3341b15e467d", ResourceVersion:"950", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 5, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-vlpgt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali904a33c6123", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:39.906309 env[1246]: 2025-07-10 01:06:39.888 [INFO][4106] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vlpgt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:06:39.906309 env[1246]: 2025-07-10 01:06:39.888 [INFO][4106] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali904a33c6123 ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vlpgt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:06:39.906309 env[1246]: 2025-07-10 01:06:39.891 [INFO][4106] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vlpgt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:06:39.906309 env[1246]: 2025-07-10 01:06:39.892 [INFO][4106] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vlpgt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3742d2bc-3ce5-4ffe-9879-3341b15e467d", ResourceVersion:"950", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 5, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1", Pod:"coredns-7c65d6cfc9-vlpgt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali904a33c6123", MAC:"26:2d:0d:b6:1b:c5", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:39.906309 env[1246]: 2025-07-10 01:06:39.904 [INFO][4106] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vlpgt" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:06:39.933569 env[1246]: time="2025-07-10T01:06:39.933448332Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:39.933569 env[1246]: time="2025-07-10T01:06:39.933472384Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:39.933569 env[1246]: time="2025-07-10T01:06:39.933479169Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:39.934180 env[1246]: time="2025-07-10T01:06:39.933734836Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1 pid=4317 runtime=io.containerd.runc.v2 Jul 10 01:06:39.941399 systemd[1]: Started cri-containerd-5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1.scope. Jul 10 01:06:39.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.949000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.950000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.950000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.950000 audit: BPF prog-id=196 op=LOAD Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4317 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566336564303563613131396465663435656131616261326234613036 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=4317 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566336564303563613131396465663435656131616261326234613036 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit: BPF prog-id=197 op=LOAD Jul 10 01:06:39.954000 audit[4327]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002d9ce0 items=0 ppid=4317 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566336564303563613131396465663435656131616261326234613036 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit: BPF prog-id=198 op=LOAD Jul 10 01:06:39.954000 audit[4327]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002d9d28 items=0 ppid=4317 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566336564303563613131396465663435656131616261326234613036 Jul 10 01:06:39.954000 audit: BPF prog-id=198 op=UNLOAD Jul 10 01:06:39.954000 audit: BPF prog-id=197 op=UNLOAD Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:39.954000 audit: BPF prog-id=199 op=LOAD Jul 10 01:06:39.954000 audit[4327]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003da138 items=0 ppid=4317 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.954000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566336564303563613131396465663435656131616261326234613036 Jul 10 01:06:39.958594 systemd-resolved[1196]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:06:39.978000 audit[4347]: NETFILTER_CFG table=filter:109 family=2 entries=62 op=nft_register_chain pid=4347 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:39.978000 audit[4347]: SYSCALL arch=c000003e syscall=46 success=yes exit=28476 a0=3 a1=7ffc8fcad900 a2=0 a3=7ffc8fcad8ec items=0 ppid=3488 pid=4347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:39.978000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:39.995118 env[1246]: time="2025-07-10T01:06:39.995087236Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-vlpgt,Uid:3742d2bc-3ce5-4ffe-9879-3341b15e467d,Namespace:kube-system,Attempt:1,} returns sandbox id \"5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1\"" Jul 10 01:06:40.001814 env[1246]: time="2025-07-10T01:06:40.001784586Z" level=info msg="CreateContainer within sandbox \"5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 01:06:40.049778 env[1246]: time="2025-07-10T01:06:40.049752912Z" level=info msg="CreateContainer within sandbox \"5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"3879a28fbd29dba7d8a553ac2eac5e7cb66fc7c611286db80bb8d3df56cdf6e5\"" Jul 10 01:06:40.051893 env[1246]: time="2025-07-10T01:06:40.051871305Z" level=info msg="StartContainer for \"3879a28fbd29dba7d8a553ac2eac5e7cb66fc7c611286db80bb8d3df56cdf6e5\"" Jul 10 01:06:40.061822 systemd[1]: Started cri-containerd-3879a28fbd29dba7d8a553ac2eac5e7cb66fc7c611286db80bb8d3df56cdf6e5.scope. Jul 10 01:06:40.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.088000 audit: BPF prog-id=200 op=LOAD Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4317 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373961323866626432396462613764386135353361633265616335 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4317 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373961323866626432396462613764386135353361633265616335 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit: BPF prog-id=201 op=LOAD Jul 10 01:06:40.089000 audit[4363]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000261d40 items=0 ppid=4317 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373961323866626432396462613764386135353361633265616335 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit: BPF prog-id=202 op=LOAD Jul 10 01:06:40.089000 audit[4363]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000261d88 items=0 ppid=4317 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373961323866626432396462613764386135353361633265616335 Jul 10 01:06:40.089000 audit: BPF prog-id=202 op=UNLOAD Jul 10 01:06:40.089000 audit: BPF prog-id=201 op=UNLOAD Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { perfmon } for pid=4363 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit[4363]: AVC avc: denied { bpf } for pid=4363 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.089000 audit: BPF prog-id=203 op=LOAD Jul 10 01:06:40.089000 audit[4363]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00032c198 items=0 ppid=4317 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3338373961323866626432396462613764386135353361633265616335 Jul 10 01:06:40.103361 env[1246]: time="2025-07-10T01:06:40.103340729Z" level=info msg="StopPodSandbox for \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\"" Jul 10 01:06:40.129046 env[1246]: time="2025-07-10T01:06:40.129020058Z" level=info msg="StartContainer for \"3879a28fbd29dba7d8a553ac2eac5e7cb66fc7c611286db80bb8d3df56cdf6e5\" returns successfully" Jul 10 01:06:40.140538 systemd-networkd[1063]: cali3bc7a0258af: Gained IPv6LL Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.138 [INFO][4389] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.138 [INFO][4389] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" iface="eth0" netns="/var/run/netns/cni-ef5751f1-95ed-0a9b-11d4-fd415b5a7895" Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.138 [INFO][4389] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" iface="eth0" netns="/var/run/netns/cni-ef5751f1-95ed-0a9b-11d4-fd415b5a7895" Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.139 [INFO][4389] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" iface="eth0" netns="/var/run/netns/cni-ef5751f1-95ed-0a9b-11d4-fd415b5a7895" Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.139 [INFO][4389] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.139 [INFO][4389] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.155 [INFO][4404] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" HandleID="k8s-pod-network.01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.155 [INFO][4404] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.155 [INFO][4404] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.159 [WARNING][4404] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" HandleID="k8s-pod-network.01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.159 [INFO][4404] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" HandleID="k8s-pod-network.01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.160 [INFO][4404] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:40.162875 env[1246]: 2025-07-10 01:06:40.161 [INFO][4389] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:06:40.164402 env[1246]: time="2025-07-10T01:06:40.163439757Z" level=info msg="TearDown network for sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\" successfully" Jul 10 01:06:40.164402 env[1246]: time="2025-07-10T01:06:40.163463399Z" level=info msg="StopPodSandbox for \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\" returns successfully" Jul 10 01:06:40.164402 env[1246]: time="2025-07-10T01:06:40.163944878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-qsmx6,Uid:b9f5384c-315f-46eb-901d-44047587f05f,Namespace:kube-system,Attempt:1,}" Jul 10 01:06:40.241171 systemd-networkd[1063]: cali81ddd0d2091: Link UP Jul 10 01:06:40.247544 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali81ddd0d2091: link becomes ready Jul 10 01:06:40.246534 systemd-networkd[1063]: cali81ddd0d2091: Gained carrier Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.192 [INFO][4411] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0 coredns-7c65d6cfc9- kube-system b9f5384c-315f-46eb-901d-44047587f05f 972 0 2025-07-10 01:05:58 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-qsmx6 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali81ddd0d2091 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qsmx6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qsmx6-" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.192 [INFO][4411] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qsmx6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.216 [INFO][4423] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" HandleID="k8s-pod-network.d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.216 [INFO][4423] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" HandleID="k8s-pod-network.d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002c4ff0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-qsmx6", "timestamp":"2025-07-10 01:06:40.216531091 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.216 [INFO][4423] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.216 [INFO][4423] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.216 [INFO][4423] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.220 [INFO][4423] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" host="localhost" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.223 [INFO][4423] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.225 [INFO][4423] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.226 [INFO][4423] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.227 [INFO][4423] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.227 [INFO][4423] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" host="localhost" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.228 [INFO][4423] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961 Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.233 [INFO][4423] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" host="localhost" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.237 [INFO][4423] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" host="localhost" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.237 [INFO][4423] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" host="localhost" Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.237 [INFO][4423] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:40.257609 env[1246]: 2025-07-10 01:06:40.237 [INFO][4423] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" HandleID="k8s-pod-network.d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:40.263700 env[1246]: 2025-07-10 01:06:40.238 [INFO][4411] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qsmx6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"b9f5384c-315f-46eb-901d-44047587f05f", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 5, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-qsmx6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali81ddd0d2091", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:40.263700 env[1246]: 2025-07-10 01:06:40.239 [INFO][4411] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qsmx6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:40.263700 env[1246]: 2025-07-10 01:06:40.239 [INFO][4411] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali81ddd0d2091 ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qsmx6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:40.263700 env[1246]: 2025-07-10 01:06:40.241 [INFO][4411] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qsmx6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:40.263700 env[1246]: 2025-07-10 01:06:40.241 [INFO][4411] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qsmx6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"b9f5384c-315f-46eb-901d-44047587f05f", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 5, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961", Pod:"coredns-7c65d6cfc9-qsmx6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali81ddd0d2091", MAC:"8e:c9:53:40:a6:6d", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:40.263700 env[1246]: 2025-07-10 01:06:40.255 [INFO][4411] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qsmx6" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:40.266105 env[1246]: time="2025-07-10T01:06:40.266072581Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:06:40.266157 env[1246]: time="2025-07-10T01:06:40.266115928Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:06:40.266157 env[1246]: time="2025-07-10T01:06:40.266130878Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:06:40.266295 env[1246]: time="2025-07-10T01:06:40.266255248Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961 pid=4450 runtime=io.containerd.runc.v2 Jul 10 01:06:40.273846 systemd[1]: Started cri-containerd-d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961.scope. Jul 10 01:06:40.274000 audit[4466]: NETFILTER_CFG table=filter:110 family=2 entries=56 op=nft_register_chain pid=4466 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:06:40.274000 audit[4466]: SYSCALL arch=c000003e syscall=46 success=yes exit=25080 a0=3 a1=7ffcdde41830 a2=0 a3=7ffcdde4181c items=0 ppid=3488 pid=4466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.274000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:06:40.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit: BPF prog-id=204 op=LOAD Jul 10 01:06:40.285000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit[4460]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4450 pid=4460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353630393862323732363266386266316365343061393733393164 Jul 10 01:06:40.285000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.285000 audit[4460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4450 pid=4460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353630393862323732363266386266316365343061393733393164 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit: BPF prog-id=205 op=LOAD Jul 10 01:06:40.286000 audit[4460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e3a40 items=0 ppid=4450 pid=4460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353630393862323732363266386266316365343061393733393164 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.286000 audit: BPF prog-id=206 op=LOAD Jul 10 01:06:40.286000 audit[4460]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001e3a88 items=0 ppid=4450 pid=4460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353630393862323732363266386266316365343061393733393164 Jul 10 01:06:40.287000 audit: BPF prog-id=206 op=UNLOAD Jul 10 01:06:40.287000 audit: BPF prog-id=205 op=UNLOAD Jul 10 01:06:40.287000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.287000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.287000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.287000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.287000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.287000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.287000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.287000 audit[4460]: AVC avc: denied { perfmon } for pid=4460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.287000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.287000 audit[4460]: AVC avc: denied { bpf } for pid=4460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.287000 audit: BPF prog-id=207 op=LOAD Jul 10 01:06:40.287000 audit[4460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001e3e98 items=0 ppid=4450 pid=4460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6434353630393862323732363266386266316365343061393733393164 Jul 10 01:06:40.289569 systemd-resolved[1196]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:06:40.310574 env[1246]: time="2025-07-10T01:06:40.310550148Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-qsmx6,Uid:b9f5384c-315f-46eb-901d-44047587f05f,Namespace:kube-system,Attempt:1,} returns sandbox id \"d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961\"" Jul 10 01:06:40.318631 env[1246]: time="2025-07-10T01:06:40.318607408Z" level=info msg="CreateContainer within sandbox \"d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 01:06:40.346280 env[1246]: time="2025-07-10T01:06:40.346253217Z" level=info msg="CreateContainer within sandbox \"d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c82fc668a4eb21217ed3d4c2c86338e82f85178873e384a347fc3bea64341d92\"" Jul 10 01:06:40.346934 env[1246]: time="2025-07-10T01:06:40.346916384Z" level=info msg="StartContainer for \"c82fc668a4eb21217ed3d4c2c86338e82f85178873e384a347fc3bea64341d92\"" Jul 10 01:06:40.372552 systemd[1]: Started cri-containerd-c82fc668a4eb21217ed3d4c2c86338e82f85178873e384a347fc3bea64341d92.scope. Jul 10 01:06:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.385000 audit: BPF prog-id=208 op=LOAD Jul 10 01:06:40.386000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.386000 audit[4494]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4450 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338326663363638613465623231323137656433643463326338363333 Jul 10 01:06:40.386000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.386000 audit[4494]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4450 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338326663363638613465623231323137656433643463326338363333 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit: BPF prog-id=209 op=LOAD Jul 10 01:06:40.387000 audit[4494]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000238290 items=0 ppid=4450 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338326663363638613465623231323137656433643463326338363333 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit: BPF prog-id=210 op=LOAD Jul 10 01:06:40.387000 audit[4494]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002382d8 items=0 ppid=4450 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338326663363638613465623231323137656433643463326338363333 Jul 10 01:06:40.387000 audit: BPF prog-id=210 op=UNLOAD Jul 10 01:06:40.387000 audit: BPF prog-id=209 op=UNLOAD Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { perfmon } for pid=4494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit[4494]: AVC avc: denied { bpf } for pid=4494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:40.387000 audit: BPF prog-id=211 op=LOAD Jul 10 01:06:40.387000 audit[4494]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002386e8 items=0 ppid=4450 pid=4494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338326663363638613465623231323137656433643463326338363333 Jul 10 01:06:40.412470 env[1246]: time="2025-07-10T01:06:40.412441530Z" level=info msg="StartContainer for \"c82fc668a4eb21217ed3d4c2c86338e82f85178873e384a347fc3bea64341d92\" returns successfully" Jul 10 01:06:40.461307 systemd-networkd[1063]: cali00edc62a2de: Gained IPv6LL Jul 10 01:06:40.489528 systemd[1]: run-netns-cni\x2def5751f1\x2d95ed\x2d0a9b\x2d11d4\x2dfd415b5a7895.mount: Deactivated successfully. Jul 10 01:06:40.717336 systemd-networkd[1063]: calia75e40b7427: Gained IPv6LL Jul 10 01:06:40.723000 audit[4505]: AVC avc: denied { getattr } for pid=4505 comm="coredns" path="cgroup:[4026532668]" dev="nsfs" ino=4026532668 scontext=system_u:system_r:svirt_lxc_net_t:s0:c249,c369 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 01:06:40.723000 audit[4374]: AVC avc: denied { getattr } for pid=4374 comm="coredns" path="cgroup:[4026533090]" dev="nsfs" ino=4026533090 scontext=system_u:system_r:svirt_lxc_net_t:s0:c69,c883 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 01:06:40.723000 audit[4505]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a828 a2=c000129078 a3=0 items=0 ppid=4450 pid=4505 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c249,c369 key=(null) Jul 10 01:06:40.723000 audit[4374]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a9a8 a2=c0004beb98 a3=0 items=0 ppid=4317 pid=4374 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c69,c883 key=(null) Jul 10 01:06:40.723000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 01:06:40.723000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 01:06:40.908479 systemd-networkd[1063]: calif2227185092: Gained IPv6LL Jul 10 01:06:40.990000 audit[4522]: NETFILTER_CFG table=filter:111 family=2 entries=20 op=nft_register_rule pid=4522 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:40.990000 audit[4522]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe76017860 a2=0 a3=7ffe7601784c items=0 ppid=2209 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.990000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:40.995000 audit[4522]: NETFILTER_CFG table=nat:112 family=2 entries=14 op=nft_register_rule pid=4522 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:40.995000 audit[4522]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffe76017860 a2=0 a3=0 items=0 ppid=2209 pid=4522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:40.995000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:41.100297 systemd-networkd[1063]: cali4dffb4e89d4: Gained IPv6LL Jul 10 01:06:41.164324 systemd-networkd[1063]: cali904a33c6123: Gained IPv6LL Jul 10 01:06:41.841000 audit[4530]: NETFILTER_CFG table=filter:113 family=2 entries=20 op=nft_register_rule pid=4530 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:41.841000 audit[4530]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe197ae340 a2=0 a3=7ffe197ae32c items=0 ppid=2209 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:41.841000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:41.845000 audit[4530]: NETFILTER_CFG table=nat:114 family=2 entries=14 op=nft_register_rule pid=4530 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:41.845000 audit[4530]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffe197ae340 a2=0 a3=0 items=0 ppid=2209 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:41.845000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:42.124964 systemd-networkd[1063]: cali81ddd0d2091: Gained IPv6LL Jul 10 01:06:42.545412 kubelet[2106]: I0710 01:06:42.289586 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-qsmx6" podStartSLOduration=43.815959243 podStartE2EDuration="43.815959243s" podCreationTimestamp="2025-07-10 01:05:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:06:41.815726715 +0000 UTC m=+48.874677001" watchObservedRunningTime="2025-07-10 01:06:41.815959243 +0000 UTC m=+48.874909525" Jul 10 01:06:42.563476 kubelet[2106]: I0710 01:06:42.558377 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-vlpgt" podStartSLOduration=44.558363545 podStartE2EDuration="44.558363545s" podCreationTimestamp="2025-07-10 01:05:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:06:40.438384357 +0000 UTC m=+47.497334637" watchObservedRunningTime="2025-07-10 01:06:42.558363545 +0000 UTC m=+49.617313831" Jul 10 01:06:42.564796 env[1246]: time="2025-07-10T01:06:42.564204304Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:42.566991 env[1246]: time="2025-07-10T01:06:42.566973478Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:42.571876 env[1246]: time="2025-07-10T01:06:42.570050338Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:42.572001 env[1246]: time="2025-07-10T01:06:42.571978494Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:42.572860 env[1246]: time="2025-07-10T01:06:42.572645500Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 01:06:42.652000 audit[4533]: NETFILTER_CFG table=filter:115 family=2 entries=17 op=nft_register_rule pid=4533 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:42.652000 audit[4533]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcc766f4a0 a2=0 a3=7ffcc766f48c items=0 ppid=2209 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:42.652000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:42.656000 audit[4533]: NETFILTER_CFG table=nat:116 family=2 entries=35 op=nft_register_chain pid=4533 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:42.656000 audit[4533]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffcc766f4a0 a2=0 a3=7ffcc766f48c items=0 ppid=2209 pid=4533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:42.656000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:42.909000 audit[4541]: NETFILTER_CFG table=filter:117 family=2 entries=14 op=nft_register_rule pid=4541 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:42.909000 audit[4541]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd6793dea0 a2=0 a3=7ffd6793de8c items=0 ppid=2209 pid=4541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:42.909000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:42.968000 audit[4541]: NETFILTER_CFG table=nat:118 family=2 entries=56 op=nft_register_chain pid=4541 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:42.968000 audit[4541]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffd6793dea0 a2=0 a3=7ffd6793de8c items=0 ppid=2209 pid=4541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:42.968000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:42.984267 env[1246]: time="2025-07-10T01:06:42.984241097Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 01:06:43.176823 env[1246]: time="2025-07-10T01:06:43.176759355Z" level=info msg="CreateContainer within sandbox \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 01:06:43.198328 env[1246]: time="2025-07-10T01:06:43.198301874Z" level=info msg="CreateContainer within sandbox \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a\"" Jul 10 01:06:43.198765 env[1246]: time="2025-07-10T01:06:43.198747917Z" level=info msg="StartContainer for \"754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a\"" Jul 10 01:06:43.252182 systemd[1]: run-containerd-runc-k8s.io-754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a-runc.oQq22p.mount: Deactivated successfully. Jul 10 01:06:43.255371 systemd[1]: Started cri-containerd-754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a.scope. Jul 10 01:06:43.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit: BPF prog-id=212 op=LOAD Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3805 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:43.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735346439313233336663333332373337636463353666313966616562 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3805 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:43.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735346439313233336663333332373337636463353666313966616562 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.274000 audit: BPF prog-id=213 op=LOAD Jul 10 01:06:43.274000 audit[4550]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001cb340 items=0 ppid=3805 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:43.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735346439313233336663333332373337636463353666313966616562 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit: BPF prog-id=214 op=LOAD Jul 10 01:06:43.275000 audit[4550]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001cb388 items=0 ppid=3805 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:43.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735346439313233336663333332373337636463353666313966616562 Jul 10 01:06:43.275000 audit: BPF prog-id=214 op=UNLOAD Jul 10 01:06:43.275000 audit: BPF prog-id=213 op=UNLOAD Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { perfmon } for pid=4550 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit[4550]: AVC avc: denied { bpf } for pid=4550 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.275000 audit: BPF prog-id=215 op=LOAD Jul 10 01:06:43.275000 audit[4550]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001cb798 items=0 ppid=3805 pid=4550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:43.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735346439313233336663333332373337636463353666313966616562 Jul 10 01:06:43.336979 env[1246]: time="2025-07-10T01:06:43.336938761Z" level=info msg="StartContainer for \"754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a\" returns successfully" Jul 10 01:06:43.551588 env[1246]: time="2025-07-10T01:06:43.551552365Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:43.553386 env[1246]: time="2025-07-10T01:06:43.553362928Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:43.554569 env[1246]: time="2025-07-10T01:06:43.554553639Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:43.555521 env[1246]: time="2025-07-10T01:06:43.555477439Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:43.556115 env[1246]: time="2025-07-10T01:06:43.555691830Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 01:06:43.578182 env[1246]: time="2025-07-10T01:06:43.578160144Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 01:06:43.598024 env[1246]: time="2025-07-10T01:06:43.597924838Z" level=info msg="CreateContainer within sandbox \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 01:06:43.608525 env[1246]: time="2025-07-10T01:06:43.608482446Z" level=info msg="CreateContainer within sandbox \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06\"" Jul 10 01:06:43.617021 env[1246]: time="2025-07-10T01:06:43.616992768Z" level=info msg="StartContainer for \"00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06\"" Jul 10 01:06:43.643976 systemd[1]: Started cri-containerd-00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06.scope. Jul 10 01:06:43.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.664000 audit: BPF prog-id=216 op=LOAD Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3855 pid=4588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:43.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030653732326132323634623265356339366534373234623332363061 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3855 pid=4588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:43.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030653732326132323634623265356339366534373234623332363061 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit: BPF prog-id=217 op=LOAD Jul 10 01:06:43.665000 audit[4588]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025890 items=0 ppid=3855 pid=4588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:43.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030653732326132323634623265356339366534373234623332363061 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit: BPF prog-id=218 op=LOAD Jul 10 01:06:43.665000 audit[4588]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000258d8 items=0 ppid=3855 pid=4588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:43.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030653732326132323634623265356339366534373234623332363061 Jul 10 01:06:43.665000 audit: BPF prog-id=218 op=UNLOAD Jul 10 01:06:43.665000 audit: BPF prog-id=217 op=UNLOAD Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { perfmon } for pid=4588 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit[4588]: AVC avc: denied { bpf } for pid=4588 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:43.665000 audit: BPF prog-id=219 op=LOAD Jul 10 01:06:43.665000 audit[4588]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025ce8 items=0 ppid=3855 pid=4588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:43.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030653732326132323634623265356339366534373234623332363061 Jul 10 01:06:43.724988 env[1246]: time="2025-07-10T01:06:43.724949474Z" level=info msg="StartContainer for \"00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06\" returns successfully" Jul 10 01:06:44.069411 env[1246]: time="2025-07-10T01:06:44.068973552Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:44.070965 env[1246]: time="2025-07-10T01:06:44.070463666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:44.071586 env[1246]: time="2025-07-10T01:06:44.071322077Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:44.072199 env[1246]: time="2025-07-10T01:06:44.071989832Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:44.072329 env[1246]: time="2025-07-10T01:06:44.072307181Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 01:06:44.073919 env[1246]: time="2025-07-10T01:06:44.073876063Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 10 01:06:44.074994 env[1246]: time="2025-07-10T01:06:44.074934007Z" level=info msg="CreateContainer within sandbox \"1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 01:06:44.083423 env[1246]: time="2025-07-10T01:06:44.083389646Z" level=info msg="CreateContainer within sandbox \"1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"721093dd2d024812b3b78bbfb4e560604c1a8efaac274ea31cc228d9937d371b\"" Jul 10 01:06:44.093865 env[1246]: time="2025-07-10T01:06:44.092286406Z" level=info msg="StartContainer for \"721093dd2d024812b3b78bbfb4e560604c1a8efaac274ea31cc228d9937d371b\"" Jul 10 01:06:44.105507 systemd[1]: Started cri-containerd-721093dd2d024812b3b78bbfb4e560604c1a8efaac274ea31cc228d9937d371b.scope. Jul 10 01:06:44.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.129000 audit: BPF prog-id=220 op=LOAD Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3902 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:44.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732313039336464326430323438313262336237386262666234653536 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3902 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:44.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732313039336464326430323438313262336237386262666234653536 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit: BPF prog-id=221 op=LOAD Jul 10 01:06:44.130000 audit[4626]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00031ef20 items=0 ppid=3902 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:44.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732313039336464326430323438313262336237386262666234653536 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit: BPF prog-id=222 op=LOAD Jul 10 01:06:44.130000 audit[4626]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00031ef68 items=0 ppid=3902 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:44.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732313039336464326430323438313262336237386262666234653536 Jul 10 01:06:44.130000 audit: BPF prog-id=222 op=UNLOAD Jul 10 01:06:44.130000 audit: BPF prog-id=221 op=UNLOAD Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:44.130000 audit: BPF prog-id=223 op=LOAD Jul 10 01:06:44.130000 audit[4626]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00031f378 items=0 ppid=3902 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:44.130000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732313039336464326430323438313262336237386262666234653536 Jul 10 01:06:44.206849 kubelet[2106]: I0710 01:06:44.206802 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-c7878fddc-hxlk4" podStartSLOduration=32.376187767 podStartE2EDuration="37.202525872s" podCreationTimestamp="2025-07-10 01:06:07 +0000 UTC" firstStartedPulling="2025-07-10 01:06:38.746319027 +0000 UTC m=+45.805269302" lastFinishedPulling="2025-07-10 01:06:43.572657132 +0000 UTC m=+50.631607407" observedRunningTime="2025-07-10 01:06:44.194586058 +0000 UTC m=+51.253536350" watchObservedRunningTime="2025-07-10 01:06:44.202525872 +0000 UTC m=+51.261476152" Jul 10 01:06:44.229995 env[1246]: time="2025-07-10T01:06:44.229964897Z" level=info msg="StartContainer for \"721093dd2d024812b3b78bbfb4e560604c1a8efaac274ea31cc228d9937d371b\" returns successfully" Jul 10 01:06:44.318000 audit[4654]: NETFILTER_CFG table=filter:119 family=2 entries=14 op=nft_register_rule pid=4654 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:44.318000 audit[4654]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffac915480 a2=0 a3=7fffac91546c items=0 ppid=2209 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:44.318000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:44.324000 audit[4654]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=4654 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:44.324000 audit[4654]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffac915480 a2=0 a3=7fffac91546c items=0 ppid=2209 pid=4654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:44.324000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:44.874360 kernel: kauditd_printk_skb: 608 callbacks suppressed Jul 10 01:06:44.892500 kernel: audit: type=1400 audit(1752109604.868:1398): avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:06:44.899384 kernel: audit: type=1300 audit(1752109604.868:1398): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00194e5e0 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:06:44.899427 kernel: audit: type=1327 audit(1752109604.868:1398): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:06:44.868000 audit[4561]: AVC avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:06:44.868000 audit[4561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00194e5e0 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:06:44.868000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:06:45.077000 audit[4598]: AVC avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:06:45.090446 kernel: audit: type=1400 audit(1752109605.077:1399): avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:06:45.090504 kernel: audit: type=1300 audit(1752109605.077:1399): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007f2c40 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:06:45.090526 kernel: audit: type=1327 audit(1752109605.077:1399): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:06:45.077000 audit[4598]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007f2c40 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:06:45.077000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:06:45.245663 kubelet[2106]: I0710 01:06:45.245575 2106 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 01:06:45.271738 kubelet[2106]: I0710 01:06:45.271692 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-c7878fddc-z4gjh" podStartSLOduration=33.93303776 podStartE2EDuration="38.27167738s" podCreationTimestamp="2025-07-10 01:06:07 +0000 UTC" firstStartedPulling="2025-07-10 01:06:38.573900361 +0000 UTC m=+45.632850636" lastFinishedPulling="2025-07-10 01:06:42.912539975 +0000 UTC m=+49.971490256" observedRunningTime="2025-07-10 01:06:44.21304029 +0000 UTC m=+51.271990576" watchObservedRunningTime="2025-07-10 01:06:45.27167738 +0000 UTC m=+52.330627661" Jul 10 01:06:45.315000 audit[4659]: NETFILTER_CFG table=filter:121 family=2 entries=14 op=nft_register_rule pid=4659 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:45.315000 audit[4659]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc38652400 a2=0 a3=7ffc386523ec items=0 ppid=2209 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:45.322201 kernel: audit: type=1325 audit(1752109605.315:1400): table=filter:121 family=2 entries=14 op=nft_register_rule pid=4659 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:45.322248 kernel: audit: type=1300 audit(1752109605.315:1400): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc38652400 a2=0 a3=7ffc386523ec items=0 ppid=2209 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:45.322270 kernel: audit: type=1327 audit(1752109605.315:1400): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:45.315000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:45.324000 audit[4659]: NETFILTER_CFG table=nat:122 family=2 entries=20 op=nft_register_rule pid=4659 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:45.354291 kernel: audit: type=1325 audit(1752109605.324:1401): table=nat:122 family=2 entries=20 op=nft_register_rule pid=4659 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:45.324000 audit[4659]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc38652400 a2=0 a3=7ffc386523ec items=0 ppid=2209 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:45.324000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:45.367097 kubelet[2106]: I0710 01:06:45.367061 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6999bb78bb-w7jtd" podStartSLOduration=32.041010816 podStartE2EDuration="37.367046498s" podCreationTimestamp="2025-07-10 01:06:08 +0000 UTC" firstStartedPulling="2025-07-10 01:06:38.746963248 +0000 UTC m=+45.805913523" lastFinishedPulling="2025-07-10 01:06:44.072998931 +0000 UTC m=+51.131949205" observedRunningTime="2025-07-10 01:06:45.294910625 +0000 UTC m=+52.353860903" watchObservedRunningTime="2025-07-10 01:06:45.367046498 +0000 UTC m=+52.425996774" Jul 10 01:06:45.802000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:06:45.802000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000fc04e0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:06:45.802000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:06:46.498000 audit[4663]: NETFILTER_CFG table=filter:123 family=2 entries=13 op=nft_register_rule pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:46.498000 audit[4663]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffbc986bd0 a2=0 a3=7fffbc986bbc items=0 ppid=2209 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:46.498000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:46.502000 audit[4663]: NETFILTER_CFG table=nat:124 family=2 entries=27 op=nft_register_chain pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:46.502000 audit[4663]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fffbc986bd0 a2=0 a3=7fffbc986bbc items=0 ppid=2209 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:46.502000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:47.736413 kubelet[2106]: I0710 01:06:47.736388 2106 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 01:06:48.061050 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2792181169.mount: Deactivated successfully. Jul 10 01:06:48.136231 env[1246]: time="2025-07-10T01:06:48.136184787Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:48.145288 env[1246]: time="2025-07-10T01:06:48.139802297Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:48.145288 env[1246]: time="2025-07-10T01:06:48.141294799Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:48.145288 env[1246]: time="2025-07-10T01:06:48.142644880Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:48.145288 env[1246]: time="2025-07-10T01:06:48.143137412Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 10 01:06:48.209487 env[1246]: time="2025-07-10T01:06:48.209458884Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 10 01:06:48.261000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:48.261000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:48.261000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a56540 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:06:48.261000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:06:48.261000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001cce600 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:06:48.261000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:06:48.403175 env[1246]: time="2025-07-10T01:06:48.402643904Z" level=info msg="CreateContainer within sandbox \"394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 10 01:06:48.437960 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1474466026.mount: Deactivated successfully. Jul 10 01:06:48.449691 env[1246]: time="2025-07-10T01:06:48.449650673Z" level=info msg="CreateContainer within sandbox \"394495db5f02e283adf7ad8b398d4e69aef16b4b08bab12588f8832bba355468\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"4f25bc9d410e7b35e90b1b0af234402c40a96de98292a6728047510c5fed46c5\"" Jul 10 01:06:48.460428 env[1246]: time="2025-07-10T01:06:48.460390087Z" level=info msg="StartContainer for \"4f25bc9d410e7b35e90b1b0af234402c40a96de98292a6728047510c5fed46c5\"" Jul 10 01:06:48.596690 systemd[1]: Started cri-containerd-4f25bc9d410e7b35e90b1b0af234402c40a96de98292a6728047510c5fed46c5.scope. Jul 10 01:06:48.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.609000 audit: BPF prog-id=224 op=LOAD Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3432 pid=4678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:48.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466323562633964343130653762333565393062316230616632333434 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3432 pid=4678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:48.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466323562633964343130653762333565393062316230616632333434 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit: BPF prog-id=225 op=LOAD Jul 10 01:06:48.610000 audit[4678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000098550 items=0 ppid=3432 pid=4678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:48.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466323562633964343130653762333565393062316230616632333434 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit: BPF prog-id=226 op=LOAD Jul 10 01:06:48.610000 audit[4678]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000098598 items=0 ppid=3432 pid=4678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:48.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466323562633964343130653762333565393062316230616632333434 Jul 10 01:06:48.610000 audit: BPF prog-id=226 op=UNLOAD Jul 10 01:06:48.610000 audit: BPF prog-id=225 op=UNLOAD Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { perfmon } for pid=4678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit[4678]: AVC avc: denied { bpf } for pid=4678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:48.610000 audit: BPF prog-id=227 op=LOAD Jul 10 01:06:48.610000 audit[4678]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000989a8 items=0 ppid=3432 pid=4678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:48.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466323562633964343130653762333565393062316230616632333434 Jul 10 01:06:48.686787 env[1246]: time="2025-07-10T01:06:48.642266518Z" level=info msg="StartContainer for \"4f25bc9d410e7b35e90b1b0af234402c40a96de98292a6728047510c5fed46c5\" returns successfully" Jul 10 01:06:49.060963 systemd[1]: run-containerd-runc-k8s.io-4f25bc9d410e7b35e90b1b0af234402c40a96de98292a6728047510c5fed46c5-runc.J6sKsx.mount: Deactivated successfully. Jul 10 01:06:49.090000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:49.090000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00d222db0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:06:49.090000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:06:49.141000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:49.141000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c00d222f90 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:06:49.141000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:06:49.143000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:49.143000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c011191e00 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:06:49.143000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:06:49.178000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:49.178000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c010fc4360 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:06:49.178000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:06:49.180000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:49.180000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c007194140 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:06:49.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:06:49.189000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:49.189000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00d2230e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:06:49.189000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:06:50.367695 kubelet[2106]: I0710 01:06:50.357062 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-9fdbf5cff-6pq9j" podStartSLOduration=3.020050475 podStartE2EDuration="14.346670896s" podCreationTimestamp="2025-07-10 01:06:36 +0000 UTC" firstStartedPulling="2025-07-10 01:06:36.838839297 +0000 UTC m=+43.897789572" lastFinishedPulling="2025-07-10 01:06:48.165459715 +0000 UTC m=+55.224409993" observedRunningTime="2025-07-10 01:06:50.213453037 +0000 UTC m=+57.272403323" watchObservedRunningTime="2025-07-10 01:06:50.346670896 +0000 UTC m=+57.405621177" Jul 10 01:06:52.255000 audit[4710]: NETFILTER_CFG table=filter:125 family=2 entries=11 op=nft_register_rule pid=4710 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:52.379861 kernel: kauditd_printk_skb: 92 callbacks suppressed Jul 10 01:06:52.435904 kernel: audit: type=1325 audit(1752109612.255:1431): table=filter:125 family=2 entries=11 op=nft_register_rule pid=4710 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:52.439632 kernel: audit: type=1300 audit(1752109612.255:1431): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffeed168ec0 a2=0 a3=7ffeed168eac items=0 ppid=2209 pid=4710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:52.444694 kernel: audit: type=1327 audit(1752109612.255:1431): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:52.445948 kernel: audit: type=1325 audit(1752109612.267:1432): table=nat:126 family=2 entries=29 op=nft_register_chain pid=4710 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:52.445972 kernel: audit: type=1300 audit(1752109612.267:1432): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffeed168ec0 a2=0 a3=7ffeed168eac items=0 ppid=2209 pid=4710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:52.450045 kernel: audit: type=1327 audit(1752109612.267:1432): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:52.255000 audit[4710]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffeed168ec0 a2=0 a3=7ffeed168eac items=0 ppid=2209 pid=4710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:52.255000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:52.267000 audit[4710]: NETFILTER_CFG table=nat:126 family=2 entries=29 op=nft_register_chain pid=4710 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:06:52.267000 audit[4710]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffeed168ec0 a2=0 a3=7ffeed168eac items=0 ppid=2209 pid=4710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:52.267000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:06:52.688000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:52.723064 kernel: audit: type=1400 audit(1752109612.688:1433): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:52.723128 kernel: audit: type=1300 audit(1752109612.688:1433): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001cceec0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:06:52.723149 kernel: audit: type=1327 audit(1752109612.688:1433): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:06:52.688000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001cceec0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:06:52.759664 kernel: audit: type=1400 audit(1752109612.748:1434): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:52.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:06:52.748000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:52.748000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ccef00 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:06:52.748000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:06:52.768000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:52.768000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c001ccef20 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:06:52.768000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:06:52.768000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:06:52.768000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001ccef40 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:06:52.768000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:06:53.079138 env[1246]: time="2025-07-10T01:06:53.078900541Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:53.090836 env[1246]: time="2025-07-10T01:06:53.082291497Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:53.090836 env[1246]: time="2025-07-10T01:06:53.083356904Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:53.090836 env[1246]: time="2025-07-10T01:06:53.084749216Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:53.090836 env[1246]: time="2025-07-10T01:06:53.085084360Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 10 01:06:53.587571 env[1246]: time="2025-07-10T01:06:53.587536475Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 10 01:06:53.604099 env[1246]: time="2025-07-10T01:06:53.603573252Z" level=info msg="StopPodSandbox for \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\"" Jul 10 01:06:54.293892 env[1246]: time="2025-07-10T01:06:54.293819627Z" level=info msg="CreateContainer within sandbox \"1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 10 01:06:54.315405 env[1246]: time="2025-07-10T01:06:54.315362585Z" level=info msg="CreateContainer within sandbox \"1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde\"" Jul 10 01:06:54.317943 env[1246]: time="2025-07-10T01:06:54.317423899Z" level=info msg="StartContainer for \"46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde\"" Jul 10 01:06:54.371853 systemd[1]: Started cri-containerd-46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde.scope. Jul 10 01:06:54.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit: BPF prog-id=228 op=LOAD Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4164 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:54.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436383635373332646436376337666366316162383438383963333664 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4164 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:54.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436383635373332646436376337666366316162383438383963333664 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit: BPF prog-id=229 op=LOAD Jul 10 01:06:54.385000 audit[4737]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00019c440 items=0 ppid=4164 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:54.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436383635373332646436376337666366316162383438383963333664 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit: BPF prog-id=230 op=LOAD Jul 10 01:06:54.385000 audit[4737]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00019c488 items=0 ppid=4164 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:54.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436383635373332646436376337666366316162383438383963333664 Jul 10 01:06:54.385000 audit: BPF prog-id=230 op=UNLOAD Jul 10 01:06:54.385000 audit: BPF prog-id=229 op=UNLOAD Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { perfmon } for pid=4737 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit[4737]: AVC avc: denied { bpf } for pid=4737 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:54.385000 audit: BPF prog-id=231 op=LOAD Jul 10 01:06:54.385000 audit[4737]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00019c898 items=0 ppid=4164 pid=4737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:54.385000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436383635373332646436376337666366316162383438383963333664 Jul 10 01:06:54.416137 env[1246]: time="2025-07-10T01:06:54.416112926Z" level=info msg="StartContainer for \"46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde\" returns successfully" Jul 10 01:06:55.091193 systemd[1]: run-containerd-runc-k8s.io-46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde-runc.LOE7xC.mount: Deactivated successfully. Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:54.543 [WARNING][4722] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" WorkloadEndpoint="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:54.553 [INFO][4722] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:54.553 [INFO][4722] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" iface="eth0" netns="" Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:54.553 [INFO][4722] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:54.553 [INFO][4722] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:55.195 [INFO][4767] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" HandleID="k8s-pod-network.450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Workload="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:55.212 [INFO][4767] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:55.214 [INFO][4767] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:55.571 [WARNING][4767] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" HandleID="k8s-pod-network.450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Workload="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:55.575 [INFO][4767] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" HandleID="k8s-pod-network.450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Workload="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:55.618 [INFO][4767] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:55.692072 env[1246]: 2025-07-10 01:06:55.657 [INFO][4722] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:55.692072 env[1246]: time="2025-07-10T01:06:55.698073375Z" level=info msg="TearDown network for sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\" successfully" Jul 10 01:06:55.692072 env[1246]: time="2025-07-10T01:06:55.698093041Z" level=info msg="StopPodSandbox for \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\" returns successfully" Jul 10 01:06:56.687727 env[1246]: time="2025-07-10T01:06:56.687698513Z" level=info msg="RemovePodSandbox for \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\"" Jul 10 01:06:56.687727 env[1246]: time="2025-07-10T01:06:56.687721979Z" level=info msg="Forcibly stopping sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\"" Jul 10 01:06:56.793083 env[1246]: time="2025-07-10T01:06:56.695625691Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:56.793083 env[1246]: time="2025-07-10T01:06:56.701893587Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:56.793083 env[1246]: time="2025-07-10T01:06:56.703349816Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:56.793083 env[1246]: time="2025-07-10T01:06:56.704299023Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:06:56.793083 env[1246]: time="2025-07-10T01:06:56.704626089Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 10 01:06:56.938063 env[1246]: time="2025-07-10T01:06:56.937996735Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.161 [WARNING][4813] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" WorkloadEndpoint="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.166 [INFO][4813] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.166 [INFO][4813] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" iface="eth0" netns="" Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.166 [INFO][4813] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.166 [INFO][4813] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.567 [INFO][4821] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" HandleID="k8s-pod-network.450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Workload="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.574 [INFO][4821] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.576 [INFO][4821] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.610 [WARNING][4821] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" HandleID="k8s-pod-network.450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Workload="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.610 [INFO][4821] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" HandleID="k8s-pod-network.450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Workload="localhost-k8s-whisker--564cd87d4f--gl4lk-eth0" Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.611 [INFO][4821] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:57.646875 env[1246]: 2025-07-10 01:06:57.630 [INFO][4813] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333" Jul 10 01:06:57.661425 env[1246]: time="2025-07-10T01:06:57.646889404Z" level=info msg="TearDown network for sandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\" successfully" Jul 10 01:06:57.664091 env[1246]: time="2025-07-10T01:06:57.664072265Z" level=info msg="RemovePodSandbox \"450c8c8b6214e80a076d1703a8ba1feb34a0630e1a2ae141ca45fd0438101333\" returns successfully" Jul 10 01:06:57.788599 env[1246]: time="2025-07-10T01:06:57.788510275Z" level=info msg="CreateContainer within sandbox \"88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 10 01:06:57.845816 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2061894597.mount: Deactivated successfully. Jul 10 01:06:57.875394 env[1246]: time="2025-07-10T01:06:57.852640876Z" level=info msg="CreateContainer within sandbox \"88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"13032c43d342a1aebaf7cb57000814d51f18da1376b38941ca760fe9584a8a1b\"" Jul 10 01:06:57.987675 env[1246]: time="2025-07-10T01:06:57.987600154Z" level=info msg="StopPodSandbox for \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\"" Jul 10 01:06:57.988110 env[1246]: time="2025-07-10T01:06:57.987876507Z" level=info msg="StartContainer for \"13032c43d342a1aebaf7cb57000814d51f18da1376b38941ca760fe9584a8a1b\"" Jul 10 01:06:58.081859 systemd[1]: Started cri-containerd-13032c43d342a1aebaf7cb57000814d51f18da1376b38941ca760fe9584a8a1b.scope. Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.188855 kernel: kauditd_printk_skb: 65 callbacks suppressed Jul 10 01:06:58.217753 kernel: audit: type=1400 audit(1752109618.117:1455): avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.220740 kernel: audit: type=1300 audit(1752109618.117:1455): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7ff49017a838 items=0 ppid=4262 pid=4855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:58.220771 kernel: audit: type=1327 audit(1752109618.117:1455): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133303332633433643334326131616562616637636235373030303831 Jul 10 01:06:58.220791 kernel: audit: type=1400 audit(1752109618.117:1456): avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.220807 kernel: audit: type=1400 audit(1752109618.117:1456): avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.223665 kernel: audit: type=1400 audit(1752109618.117:1456): avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.223689 kernel: audit: type=1400 audit(1752109618.117:1456): avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.223705 kernel: audit: type=1400 audit(1752109618.117:1456): avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.223719 kernel: audit: type=1400 audit(1752109618.117:1456): avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.223735 kernel: audit: type=1400 audit(1752109618.117:1456): avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit[4855]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7ff49017a838 items=0 ppid=4262 pid=4855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:58.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133303332633433643334326131616562616637636235373030303831 Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.117000 audit: BPF prog-id=232 op=LOAD Jul 10 01:06:58.117000 audit[4855]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000342fe8 items=0 ppid=4262 pid=4855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:58.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133303332633433643334326131616562616637636235373030303831 Jul 10 01:06:58.120000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.120000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.120000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.120000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.120000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.120000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.120000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.120000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.120000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.120000 audit: BPF prog-id=233 op=LOAD Jul 10 01:06:58.120000 audit[4855]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000343038 items=0 ppid=4262 pid=4855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:58.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133303332633433643334326131616562616637636235373030303831 Jul 10 01:06:58.123000 audit: BPF prog-id=233 op=UNLOAD Jul 10 01:06:58.124000 audit: BPF prog-id=232 op=UNLOAD Jul 10 01:06:58.124000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.124000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.124000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.124000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.124000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.124000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.124000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.124000 audit[4855]: AVC avc: denied { perfmon } for pid=4855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.124000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.124000 audit[4855]: AVC avc: denied { bpf } for pid=4855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:06:58.124000 audit: BPF prog-id=234 op=LOAD Jul 10 01:06:58.124000 audit[4855]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003430c8 items=0 ppid=4262 pid=4855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:06:58.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3133303332633433643334326131616562616637636235373030303831 Jul 10 01:06:58.303834 env[1246]: time="2025-07-10T01:06:58.166387980Z" level=info msg="StartContainer for \"13032c43d342a1aebaf7cb57000814d51f18da1376b38941ca760fe9584a8a1b\" returns successfully" Jul 10 01:06:58.513326 systemd[1]: run-containerd-runc-k8s.io-13032c43d342a1aebaf7cb57000814d51f18da1376b38941ca760fe9584a8a1b-runc.WTcrbY.mount: Deactivated successfully. Jul 10 01:06:59.024214 kubelet[2106]: E0710 01:06:58.670099 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.063s" Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:58.913 [WARNING][4888] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"b9f5384c-315f-46eb-901d-44047587f05f", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 5, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961", Pod:"coredns-7c65d6cfc9-qsmx6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali81ddd0d2091", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:58.925 [INFO][4888] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:58.925 [INFO][4888] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" iface="eth0" netns="" Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:58.925 [INFO][4888] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:58.925 [INFO][4888] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:59.266 [INFO][4905] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" HandleID="k8s-pod-network.01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:59.273 [INFO][4905] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:59.273 [INFO][4905] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:59.301 [WARNING][4905] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" HandleID="k8s-pod-network.01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:59.302 [INFO][4905] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" HandleID="k8s-pod-network.01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:59.303 [INFO][4905] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:06:59.316003 env[1246]: 2025-07-10 01:06:59.307 [INFO][4888] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:06:59.316003 env[1246]: time="2025-07-10T01:06:59.315014432Z" level=info msg="TearDown network for sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\" successfully" Jul 10 01:06:59.316003 env[1246]: time="2025-07-10T01:06:59.315033547Z" level=info msg="StopPodSandbox for \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\" returns successfully" Jul 10 01:06:59.457258 env[1246]: time="2025-07-10T01:06:59.457159272Z" level=info msg="RemovePodSandbox for \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\"" Jul 10 01:06:59.457258 env[1246]: time="2025-07-10T01:06:59.457205330Z" level=info msg="Forcibly stopping sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\"" Jul 10 01:06:59.997276 kubelet[2106]: I0710 01:06:59.965583 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-75d97f4747-nwdjf" podStartSLOduration=36.073627068 podStartE2EDuration="49.805081539s" podCreationTimestamp="2025-07-10 01:06:10 +0000 UTC" firstStartedPulling="2025-07-10 01:06:39.826091404 +0000 UTC m=+46.885041681" lastFinishedPulling="2025-07-10 01:06:53.557545869 +0000 UTC m=+60.616496152" observedRunningTime="2025-07-10 01:06:59.761289566 +0000 UTC m=+66.820239861" watchObservedRunningTime="2025-07-10 01:06:59.805081539 +0000 UTC m=+66.864031830" Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:06:59.945 [WARNING][4921] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"b9f5384c-315f-46eb-901d-44047587f05f", ResourceVersion:"997", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 5, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d456098b27262f8bf1ce40a97391dad02699739775377d68d838d88ab9ba3961", Pod:"coredns-7c65d6cfc9-qsmx6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali81ddd0d2091", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:06:59.946 [INFO][4921] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:06:59.946 [INFO][4921] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" iface="eth0" netns="" Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:06:59.946 [INFO][4921] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:06:59.946 [INFO][4921] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:07:00.246 [INFO][4928] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" HandleID="k8s-pod-network.01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:07:00.253 [INFO][4928] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:07:00.253 [INFO][4928] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:07:00.270 [WARNING][4928] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" HandleID="k8s-pod-network.01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:07:00.270 [INFO][4928] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" HandleID="k8s-pod-network.01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Workload="localhost-k8s-coredns--7c65d6cfc9--qsmx6-eth0" Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:07:00.271 [INFO][4928] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:07:00.277537 env[1246]: 2025-07-10 01:07:00.276 [INFO][4921] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7" Jul 10 01:07:00.292413 env[1246]: time="2025-07-10T01:07:00.277655535Z" level=info msg="TearDown network for sandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\" successfully" Jul 10 01:07:00.292413 env[1246]: time="2025-07-10T01:07:00.287987264Z" level=info msg="RemovePodSandbox \"01f7c7047a5df44db5e5c2dcb2a1385f4f6452c8a56cd6da607e022941de9df7\" returns successfully" Jul 10 01:07:00.459182 env[1246]: time="2025-07-10T01:07:00.459151572Z" level=info msg="StopPodSandbox for \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\"" Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:00.642 [WARNING][4943] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0", GenerateName:"calico-kube-controllers-75d97f4747-", Namespace:"calico-system", SelfLink:"", UID:"a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"75d97f4747", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762", Pod:"calico-kube-controllers-75d97f4747-nwdjf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia75e40b7427", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:00.643 [INFO][4943] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:00.643 [INFO][4943] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" iface="eth0" netns="" Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:00.643 [INFO][4943] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:00.643 [INFO][4943] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:01.218 [INFO][4950] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" HandleID="k8s-pod-network.c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:01.224 [INFO][4950] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:01.226 [INFO][4950] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:01.293 [WARNING][4950] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" HandleID="k8s-pod-network.c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:01.293 [INFO][4950] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" HandleID="k8s-pod-network.c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:01.294 [INFO][4950] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:07:01.315054 env[1246]: 2025-07-10 01:07:01.302 [INFO][4943] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:07:01.355752 env[1246]: time="2025-07-10T01:07:01.315069337Z" level=info msg="TearDown network for sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\" successfully" Jul 10 01:07:01.355752 env[1246]: time="2025-07-10T01:07:01.315090219Z" level=info msg="StopPodSandbox for \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\" returns successfully" Jul 10 01:07:01.377631 env[1246]: time="2025-07-10T01:07:01.377603571Z" level=info msg="RemovePodSandbox for \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\"" Jul 10 01:07:01.377734 env[1246]: time="2025-07-10T01:07:01.377631243Z" level=info msg="Forcibly stopping sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\"" Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:01.774 [WARNING][4968] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0", GenerateName:"calico-kube-controllers-75d97f4747-", Namespace:"calico-system", SelfLink:"", UID:"a18c88cd-98e2-4bea-b2ca-cb35f62e7eb3", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"75d97f4747", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1923455f58253f18da52d3aed0137ced7549ad437dab58fedb577ceae3dc1762", Pod:"calico-kube-controllers-75d97f4747-nwdjf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calia75e40b7427", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:01.793 [INFO][4968] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:01.793 [INFO][4968] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" iface="eth0" netns="" Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:01.793 [INFO][4968] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:01.793 [INFO][4968] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:02.272 [INFO][4975] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" HandleID="k8s-pod-network.c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:02.282 [INFO][4975] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:02.284 [INFO][4975] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:02.369 [WARNING][4975] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" HandleID="k8s-pod-network.c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:02.369 [INFO][4975] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" HandleID="k8s-pod-network.c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Workload="localhost-k8s-calico--kube--controllers--75d97f4747--nwdjf-eth0" Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:02.370 [INFO][4975] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:07:02.408106 env[1246]: 2025-07-10 01:07:02.385 [INFO][4968] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c" Jul 10 01:07:02.408106 env[1246]: time="2025-07-10T01:07:02.404629016Z" level=info msg="TearDown network for sandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\" successfully" Jul 10 01:07:02.499556 env[1246]: time="2025-07-10T01:07:02.424263098Z" level=info msg="RemovePodSandbox \"c13255e3ae204c4332552bfc38b8eb7e06a34c06852c2455499713d1e8ef223c\" returns successfully" Jul 10 01:07:03.143172 env[1246]: time="2025-07-10T01:07:03.143143375Z" level=info msg="StopPodSandbox for \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\"" Jul 10 01:07:04.878257 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3921200420.mount: Deactivated successfully. Jul 10 01:07:06.243174 env[1246]: time="2025-07-10T01:07:06.236373193Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:06.243174 env[1246]: time="2025-07-10T01:07:06.240845173Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:06.243174 env[1246]: time="2025-07-10T01:07:06.242364874Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:06.243174 env[1246]: time="2025-07-10T01:07:06.244055295Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:06.243174 env[1246]: time="2025-07-10T01:07:06.244426307Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:05.736 [WARNING][4989] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qgl94-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"7799fe3e-a251-4686-9a72-4acdb4232475", ResourceVersion:"960", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149", Pod:"csi-node-driver-qgl94", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif2227185092", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:05.760 [INFO][4989] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:05.761 [INFO][4989] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" iface="eth0" netns="" Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:05.761 [INFO][4989] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:05.761 [INFO][4989] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:07.457 [INFO][4996] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" HandleID="k8s-pod-network.7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:07.515 [INFO][4996] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:07.520 [INFO][4996] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:07.896 [WARNING][4996] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" HandleID="k8s-pod-network.7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:07.911 [INFO][4996] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" HandleID="k8s-pod-network.7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:07.913 [INFO][4996] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:07:07.987699 env[1246]: 2025-07-10 01:07:07.949 [INFO][4989] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:07:07.987699 env[1246]: time="2025-07-10T01:07:07.980402546Z" level=info msg="TearDown network for sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\" successfully" Jul 10 01:07:07.987699 env[1246]: time="2025-07-10T01:07:07.980497255Z" level=info msg="StopPodSandbox for \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\" returns successfully" Jul 10 01:07:09.047690 env[1246]: time="2025-07-10T01:07:09.047660649Z" level=info msg="RemovePodSandbox for \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\"" Jul 10 01:07:09.047690 env[1246]: time="2025-07-10T01:07:09.047686916Z" level=info msg="Forcibly stopping sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\"" Jul 10 01:07:10.708764 env[1246]: time="2025-07-10T01:07:10.708690037Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:10.837 [WARNING][5014] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--qgl94-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"7799fe3e-a251-4686-9a72-4acdb4232475", ResourceVersion:"960", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149", Pod:"csi-node-driver-qgl94", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif2227185092", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:10.870 [INFO][5014] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:10.872 [INFO][5014] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" iface="eth0" netns="" Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:10.872 [INFO][5014] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:10.872 [INFO][5014] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:11.855 [INFO][5023] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" HandleID="k8s-pod-network.7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:11.978 [INFO][5023] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:11.989 [INFO][5023] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:12.318 [WARNING][5023] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" HandleID="k8s-pod-network.7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:12.318 [INFO][5023] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" HandleID="k8s-pod-network.7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Workload="localhost-k8s-csi--node--driver--qgl94-eth0" Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:12.318 [INFO][5023] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:07:12.372317 env[1246]: 2025-07-10 01:07:12.346 [INFO][5014] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39" Jul 10 01:07:12.372317 env[1246]: time="2025-07-10T01:07:12.371790158Z" level=info msg="TearDown network for sandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\" successfully" Jul 10 01:07:12.438696 env[1246]: time="2025-07-10T01:07:12.377831785Z" level=info msg="RemovePodSandbox \"7eae9feaaef0d1675b65da88e3bd8c764403585d6590bbbe13830eb8abf2ab39\" returns successfully" Jul 10 01:07:13.579083 env[1246]: time="2025-07-10T01:07:13.578755497Z" level=info msg="StopPodSandbox for \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\"" Jul 10 01:07:15.114565 env[1246]: time="2025-07-10T01:07:15.114519578Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:15.247327 env[1246]: time="2025-07-10T01:07:15.124011556Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:15.247327 env[1246]: time="2025-07-10T01:07:15.125101590Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:15.247327 env[1246]: time="2025-07-10T01:07:15.127431576Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:15.247327 env[1246]: time="2025-07-10T01:07:15.127910825Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:15.866 [WARNING][5038] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0", GenerateName:"calico-apiserver-c7878fddc-", Namespace:"calico-apiserver", SelfLink:"", UID:"86db2015-705f-4be8-a79f-2635acd70c3f", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c7878fddc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5", Pod:"calico-apiserver-c7878fddc-hxlk4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3bc7a0258af", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:15.900 [INFO][5038] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:15.901 [INFO][5038] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" iface="eth0" netns="" Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:15.901 [INFO][5038] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:15.901 [INFO][5038] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:17.043 [INFO][5045] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" HandleID="k8s-pod-network.b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:17.086 [INFO][5045] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:17.086 [INFO][5045] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:17.237 [WARNING][5045] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" HandleID="k8s-pod-network.b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:17.237 [INFO][5045] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" HandleID="k8s-pod-network.b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:17.238 [INFO][5045] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:07:17.363415 env[1246]: 2025-07-10 01:07:17.256 [INFO][5038] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:07:17.363415 env[1246]: time="2025-07-10T01:07:17.360459572Z" level=info msg="TearDown network for sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\" successfully" Jul 10 01:07:17.363415 env[1246]: time="2025-07-10T01:07:17.360486603Z" level=info msg="StopPodSandbox for \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\" returns successfully" Jul 10 01:07:19.865409 env[1246]: time="2025-07-10T01:07:19.859718984Z" level=info msg="RemovePodSandbox for \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\"" Jul 10 01:07:19.865409 env[1246]: time="2025-07-10T01:07:19.859741686Z" level=info msg="Forcibly stopping sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\"" Jul 10 01:07:22.874525 systemd[1]: Started sshd@7-139.178.70.108:22-139.178.68.195:39420.service. Jul 10 01:07:23.000701 kernel: kauditd_printk_skb: 33 callbacks suppressed Jul 10 01:07:23.004712 kernel: audit: type=1130 audit(1752109642.884:1461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.108:22-139.178.68.195:39420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:22.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.108:22-139.178.68.195:39420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:23.497000 audit[5099]: USER_ACCT pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:23.628635 kernel: audit: type=1101 audit(1752109643.497:1462): pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:23.644291 kernel: audit: type=1103 audit(1752109643.605:1463): pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:23.644334 kernel: audit: type=1006 audit(1752109643.611:1464): pid=5099 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 10 01:07:23.644377 kernel: audit: type=1300 audit(1752109643.611:1464): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec0ff50d0 a2=3 a3=0 items=0 ppid=1 pid=5099 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.644412 kernel: audit: type=1327 audit(1752109643.611:1464): proctitle=737368643A20636F7265205B707269765D Jul 10 01:07:23.605000 audit[5099]: CRED_ACQ pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:23.611000 audit[5099]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec0ff50d0 a2=3 a3=0 items=0 ppid=1 pid=5099 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.611000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:07:23.711578 sshd[5099]: Accepted publickey for core from 139.178.68.195 port 39420 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:07:23.664241 sshd[5099]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:07:23.909975 systemd-logind[1238]: New session 10 of user core. Jul 10 01:07:23.915690 systemd[1]: Started session-10.scope. Jul 10 01:07:23.967538 kernel: audit: type=1105 audit(1752109643.952:1465): pid=5099 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:23.952000 audit[5099]: USER_START pid=5099 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:24.006000 audit[5104]: CRED_ACQ pid=5104 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:24.013357 kernel: audit: type=1103 audit(1752109644.006:1466): pid=5104 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:21.721 [WARNING][5065] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0", GenerateName:"calico-apiserver-c7878fddc-", Namespace:"calico-apiserver", SelfLink:"", UID:"86db2015-705f-4be8-a79f-2635acd70c3f", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c7878fddc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5", Pod:"calico-apiserver-c7878fddc-hxlk4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3bc7a0258af", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:21.731 [INFO][5065] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:21.732 [INFO][5065] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" iface="eth0" netns="" Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:21.732 [INFO][5065] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:21.732 [INFO][5065] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:25.088 [INFO][5094] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" HandleID="k8s-pod-network.b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:25.161 [INFO][5094] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:25.164 [INFO][5094] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:26.493 [WARNING][5094] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" HandleID="k8s-pod-network.b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:26.528 [INFO][5094] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" HandleID="k8s-pod-network.b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:27.030 [INFO][5094] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:07:27.320113 env[1246]: 2025-07-10 01:07:27.220 [INFO][5065] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d" Jul 10 01:07:27.320113 env[1246]: time="2025-07-10T01:07:27.309872278Z" level=info msg="TearDown network for sandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\" successfully" Jul 10 01:07:27.504839 env[1246]: time="2025-07-10T01:07:27.345587174Z" level=info msg="RemovePodSandbox \"b0f2fd839d4b471bf738511a032604e00862c27c09e843e07c331750a5d5ce7d\" returns successfully" Jul 10 01:07:45.092000 audit[4561]: AVC avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:07:45.266315 kernel: audit: type=1400 audit(1752109665.092:1467): avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:07:45.272817 kernel: audit: type=1300 audit(1752109665.092:1467): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0022792e0 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:07:45.274011 kernel: audit: type=1327 audit(1752109665.092:1467): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:07:45.274037 kernel: audit: type=1400 audit(1752109665.105:1468): avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:07:45.274057 kernel: audit: type=1300 audit(1752109665.105:1468): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015551c0 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:07:45.276300 kernel: audit: type=1327 audit(1752109665.105:1468): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:07:45.092000 audit[4561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0022792e0 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:07:45.092000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:07:45.105000 audit[4598]: AVC avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:07:45.105000 audit[4598]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015551c0 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:07:45.105000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:07:45.903000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:07:46.000173 kernel: audit: type=1400 audit(1752109665.903:1469): avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:07:46.009657 kernel: audit: type=1300 audit(1752109665.903:1469): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c14a0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:07:46.009720 kernel: audit: type=1327 audit(1752109665.903:1469): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:07:45.903000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c14a0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:07:45.903000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:07:48.338000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:48.520275 kernel: audit: type=1400 audit(1752109668.338:1470): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:48.338000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002b89710 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:07:48.338000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:48.343000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:48.343000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00357d360 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:07:48.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:49.223000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:49.223000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c00408f140 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:07:49.223000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:49.223000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:49.223000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c008ee4ba0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:07:49.223000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:49.259000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:49.259000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c011191be0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:07:49.259000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:49.277000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:49.277000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c00408f260 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:07:49.277000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:49.290000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:49.290000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c0074aef00 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:07:49.290000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:49.290000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:49.290000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c0074aef60 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:07:49.290000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:52.829000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:52.947678 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 10 01:07:52.973815 kernel: audit: type=1400 audit(1752109672.829:1478): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:52.977834 kernel: audit: type=1300 audit(1752109672.829:1478): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00357d4c0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:07:52.986776 kernel: audit: type=1327 audit(1752109672.829:1478): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:52.986816 kernel: audit: type=1400 audit(1752109672.843:1479): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:52.992267 kernel: audit: type=1300 audit(1752109672.843:1479): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00357d4e0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:07:52.992297 kernel: audit: type=1327 audit(1752109672.843:1479): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:52.992314 kernel: audit: type=1400 audit(1752109672.866:1480): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:52.992423 kernel: audit: type=1300 audit(1752109672.866:1480): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002f81000 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:07:52.992442 kernel: audit: type=1327 audit(1752109672.866:1480): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:52.997980 kernel: audit: type=1400 audit(1752109672.874:1481): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:52.829000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00357d4c0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:07:52.829000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:52.843000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:52.843000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00357d4e0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:07:52.843000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:52.866000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:52.866000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002f81000 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:07:52.866000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:52.874000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:52.874000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002f81020 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:07:52.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:55.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.108:22-194.0.234.19:23210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:55.155749 systemd[1]: Started sshd@8-139.178.70.108:22-194.0.234.19:23210.service. Jul 10 01:07:56.647369 sshd[5125]: Invalid user carlos from 194.0.234.19 port 23210 Jul 10 01:07:57.427203 sshd[5125]: pam_faillock(sshd:auth): User unknown Jul 10 01:07:57.441000 audit[5125]: USER_AUTH pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="carlos" exe="/usr/sbin/sshd" hostname=194.0.234.19 addr=194.0.234.19 terminal=ssh res=failed' Jul 10 01:07:57.438610 sshd[5125]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:07:57.438649 sshd[5125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.0.234.19 Jul 10 01:07:57.438914 sshd[5125]: pam_faillock(sshd:auth): User unknown Jul 10 01:07:59.226617 sshd[5125]: Failed password for invalid user carlos from 194.0.234.19 port 23210 ssh2 Jul 10 01:07:59.598864 sshd[5125]: Connection closed by invalid user carlos 194.0.234.19 port 23210 [preauth] Jul 10 01:07:59.657396 systemd[1]: sshd@8-139.178.70.108:22-194.0.234.19:23210.service: Deactivated successfully. Jul 10 01:07:59.683644 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 10 01:07:59.693972 kernel: audit: type=1131 audit(1752109679.669:1484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.108:22-194.0.234.19:23210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:59.669000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.108:22-194.0.234.19:23210 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:59.719000 audit[5140]: NETFILTER_CFG table=filter:127 family=2 entries=15 op=nft_register_rule pid=5140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:07:59.738137 kernel: audit: type=1325 audit(1752109679.719:1485): table=filter:127 family=2 entries=15 op=nft_register_rule pid=5140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:07:59.738174 kernel: audit: type=1300 audit(1752109679.719:1485): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffda9989480 a2=0 a3=7ffda998946c items=0 ppid=2209 pid=5140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:59.738205 kernel: audit: type=1327 audit(1752109679.719:1485): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:07:59.739361 kernel: audit: type=1325 audit(1752109679.730:1486): table=nat:128 family=2 entries=61 op=nft_unregister_chain pid=5140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:07:59.739383 kernel: audit: type=1300 audit(1752109679.730:1486): arch=c000003e syscall=46 success=yes exit=5132 a0=3 a1=7ffda9989480 a2=0 a3=7ffda998946c items=0 ppid=2209 pid=5140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:59.739401 kernel: audit: type=1327 audit(1752109679.730:1486): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:07:59.719000 audit[5140]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffda9989480 a2=0 a3=7ffda998946c items=0 ppid=2209 pid=5140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:59.719000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:07:59.730000 audit[5140]: NETFILTER_CFG table=nat:128 family=2 entries=61 op=nft_unregister_chain pid=5140 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:07:59.730000 audit[5140]: SYSCALL arch=c000003e syscall=46 success=yes exit=5132 a0=3 a1=7ffda9989480 a2=0 a3=7ffda998946c items=0 ppid=2209 pid=5140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:59.730000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:07:59.883000 audit[5144]: NETFILTER_CFG table=filter:129 family=2 entries=21 op=nft_register_rule pid=5144 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:07:59.892964 kernel: audit: type=1325 audit(1752109679.883:1487): table=filter:129 family=2 entries=21 op=nft_register_rule pid=5144 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:07:59.892996 kernel: audit: type=1300 audit(1752109679.883:1487): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffccfcba510 a2=0 a3=7ffccfcba4fc items=0 ppid=2209 pid=5144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:59.883000 audit[5144]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffccfcba510 a2=0 a3=7ffccfcba4fc items=0 ppid=2209 pid=5144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:59.883000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:07:59.895200 kernel: audit: type=1327 audit(1752109679.883:1487): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:07:59.895000 audit[5144]: NETFILTER_CFG table=nat:130 family=2 entries=19 op=nft_unregister_chain pid=5144 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:07:59.895000 audit[5144]: SYSCALL arch=c000003e syscall=46 success=yes exit=2956 a0=3 a1=7ffccfcba510 a2=0 a3=0 items=0 ppid=2209 pid=5144 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:59.895000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:02.324919 env[1246]: time="2025-07-10T01:08:02.320452744Z" level=info msg="CreateContainer within sandbox \"2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 10 01:08:02.403578 env[1246]: time="2025-07-10T01:08:02.403550795Z" level=info msg="CreateContainer within sandbox \"2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc\"" Jul 10 01:08:02.489080 kubelet[2106]: W0710 01:08:00.830466 2106 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@8-139.178.70.108:22-194.0.234.19:23210.service": 0x40000100 == IN_CREATE|IN_ISDIR): readdirent /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@8-139.178.70.108:22-194.0.234.19:23210.service: no such file or directory Jul 10 01:08:02.765121 env[1246]: time="2025-07-10T01:08:02.765051555Z" level=info msg="StopPodSandbox for \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\"" Jul 10 01:08:02.767894 env[1246]: time="2025-07-10T01:08:02.765401799Z" level=info msg="StartContainer for \"8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc\"" Jul 10 01:08:02.803287 kubelet[2106]: E0710 01:08:02.802510 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="54.03s" Jul 10 01:08:02.819141 systemd[1]: run-containerd-runc-k8s.io-8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc-runc.aks59w.mount: Deactivated successfully. Jul 10 01:08:02.855647 systemd[1]: Started cri-containerd-8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc.scope. Jul 10 01:08:02.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.914000 audit: BPF prog-id=235 op=LOAD Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4215 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:02.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865356262323239653037373533613638363935393063316432323433 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4215 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:02.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865356262323239653037373533613638363935393063316432323433 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit: BPF prog-id=236 op=LOAD Jul 10 01:08:02.915000 audit[5156]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000312300 items=0 ppid=4215 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:02.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865356262323239653037373533613638363935393063316432323433 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit: BPF prog-id=237 op=LOAD Jul 10 01:08:02.915000 audit[5156]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000312348 items=0 ppid=4215 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:02.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865356262323239653037373533613638363935393063316432323433 Jul 10 01:08:02.915000 audit: BPF prog-id=237 op=UNLOAD Jul 10 01:08:02.915000 audit: BPF prog-id=236 op=UNLOAD Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { perfmon } for pid=5156 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit[5156]: AVC avc: denied { bpf } for pid=5156 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:02.915000 audit: BPF prog-id=238 op=LOAD Jul 10 01:08:02.915000 audit[5156]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000312758 items=0 ppid=4215 pid=5156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:02.915000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865356262323239653037373533613638363935393063316432323433 Jul 10 01:08:03.030643 env[1246]: time="2025-07-10T01:08:02.989379600Z" level=info msg="StartContainer for \"8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc\" returns successfully" Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:03.946 [WARNING][5176] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"3180f4c6-8ed5-4a0a-af99-8b3974a06a57", ResourceVersion:"956", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a", Pod:"goldmane-58fd7646b9-bxt4b", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali4dffb4e89d4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:03.982 [INFO][5176] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:03.983 [INFO][5176] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" iface="eth0" netns="" Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:03.984 [INFO][5176] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:03.984 [INFO][5176] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:04.911 [INFO][5198] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" HandleID="k8s-pod-network.0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:04.930 [INFO][5198] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:04.934 [INFO][5198] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:05.743 [WARNING][5198] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" HandleID="k8s-pod-network.0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:05.767 [INFO][5198] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" HandleID="k8s-pod-network.0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:05.871 [INFO][5198] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:05.949332 env[1246]: 2025-07-10 01:08:05.910 [INFO][5176] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:08:05.949332 env[1246]: time="2025-07-10T01:08:05.947287091Z" level=info msg="TearDown network for sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\" successfully" Jul 10 01:08:05.949332 env[1246]: time="2025-07-10T01:08:05.947308831Z" level=info msg="StopPodSandbox for \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\" returns successfully" Jul 10 01:08:38.450862 sshd[5099]: pam_unix(sshd:session): session closed for user core Jul 10 01:08:38.553259 kernel: kauditd_printk_skb: 60 callbacks suppressed Jul 10 01:08:38.560343 kernel: audit: type=1106 audit(1752109718.507:1507): pid=5099 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:38.561668 kernel: audit: type=1104 audit(1752109718.517:1508): pid=5099 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:38.561702 kernel: audit: type=1131 audit(1752109718.541:1509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.108:22-139.178.68.195:39420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:08:38.507000 audit[5099]: USER_END pid=5099 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:38.517000 audit[5099]: CRED_DISP pid=5099 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:38.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.108:22-139.178.68.195:39420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:08:38.538957 systemd[1]: sshd@7-139.178.70.108:22-139.178.68.195:39420.service: Deactivated successfully. Jul 10 01:08:38.547914 systemd[1]: session-10.scope: Deactivated successfully. Jul 10 01:08:38.548022 systemd[1]: session-10.scope: Consumed 16.015s CPU time. Jul 10 01:08:38.549567 systemd-logind[1238]: Session 10 logged out. Waiting for processes to exit. Jul 10 01:08:38.562881 systemd-logind[1238]: Removed session 10. Jul 10 01:08:39.791033 kubelet[2106]: I0710 01:08:39.669426 2106 setters.go:600] "Node became not ready" node="localhost" condition={"type":"Ready","status":"False","lastHeartbeatTime":"2025-07-10T01:08:39Z","lastTransitionTime":"2025-07-10T01:08:39Z","reason":"KubeletNotReady","message":"container runtime is down"} Jul 10 01:08:40.330226 env[1246]: time="2025-07-10T01:08:40.330085297Z" level=info msg="RemovePodSandbox for \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\"" Jul 10 01:08:40.330226 env[1246]: time="2025-07-10T01:08:40.330109528Z" level=info msg="Forcibly stopping sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\"" Jul 10 01:08:40.342919 env[1246]: time="2025-07-10T01:08:40.330917750Z" level=info msg="CreateContainer within sandbox \"88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 10 01:08:40.457705 env[1246]: time="2025-07-10T01:08:40.457677343Z" level=info msg="CreateContainer within sandbox \"88630e6bbd1efcc3f06f9ed9c83ab5e8005fbb315dd525e0d3abbdf14bf9e149\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"4dc560982807b4453052767cbc366a68adc9f7a36b6d7fbf205092a8f9a69e7d\"" Jul 10 01:08:43.972590 systemd[1]: Started sshd@9-139.178.70.108:22-139.178.68.195:54508.service. Jul 10 01:08:44.185414 kernel: audit: type=1130 audit(1752109723.977:1510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.108:22-139.178.68.195:54508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:08:43.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.108:22-139.178.68.195:54508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:08:45.175000 audit[4561]: AVC avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:08:45.374378 kernel: audit: type=1400 audit(1752109725.175:1511): avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:08:45.379822 kernel: audit: type=1300 audit(1752109725.175:1511): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001a64d00 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:08:45.382036 kernel: audit: type=1327 audit(1752109725.175:1511): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:45.382068 kernel: audit: type=1400 audit(1752109725.180:1512): avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:08:45.384019 kernel: audit: type=1300 audit(1752109725.180:1512): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001555a00 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:08:45.385999 kernel: audit: type=1327 audit(1752109725.180:1512): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:45.175000 audit[4561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001a64d00 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:08:45.175000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:45.180000 audit[4598]: AVC avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:08:45.180000 audit[4598]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001555a00 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:08:45.180000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:45.941724 sshd[5359]: Accepted publickey for core from 139.178.68.195 port 54508 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:08:46.261876 kernel: audit: type=1101 audit(1752109725.940:1513): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:46.276186 kernel: audit: type=1400 audit(1752109726.241:1514): avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:08:46.277658 kernel: audit: type=1300 audit(1752109726.241:1514): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0010517a0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:08:45.940000 audit[5359]: USER_ACCT pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:46.241000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:08:46.241000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0010517a0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:08:46.241000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:46.276000 audit[5359]: CRED_ACQ pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:46.279000 audit[5359]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb41a6160 a2=3 a3=0 items=0 ppid=1 pid=5359 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.279000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:08:46.305055 sshd[5359]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:08:46.721592 systemd-logind[1238]: New session 11 of user core. Jul 10 01:08:46.734299 systemd[1]: Started session-11.scope. Jul 10 01:08:46.948000 audit[5359]: USER_START pid=5359 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:47.092000 audit[5361]: CRED_ACQ pid=5361 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:48.518000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:48.518000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017fdd40 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:08:48.518000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:48.525000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:48.525000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0015a1f60 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:08:48.525000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:49.564000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:49.590726 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 10 01:08:49.614446 kernel: audit: type=1400 audit(1752109729.564:1521): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:49.634786 kernel: audit: type=1300 audit(1752109729.564:1521): arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c00d0530a0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:08:49.634862 kernel: audit: type=1327 audit(1752109729.564:1521): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:49.643033 kernel: audit: type=1400 audit(1752109729.574:1522): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:49.660383 kernel: audit: type=1300 audit(1752109729.574:1522): arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c007d29380 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:08:49.660448 kernel: audit: type=1327 audit(1752109729.574:1522): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:49.660472 kernel: audit: type=1400 audit(1752109729.580:1523): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:49.677593 kernel: audit: type=1300 audit(1752109729.580:1523): arch=c000003e syscall=254 success=no exit=-13 a0=86 a1=c00d0530c0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:08:49.677663 kernel: audit: type=1327 audit(1752109729.580:1523): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:49.564000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=83 a1=c00d0530a0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:08:49.564000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:49.574000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:49.574000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c007d29380 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:08:49.574000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:49.580000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:49.580000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=86 a1=c00d0530c0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:08:49.580000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:50.049000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:50.066387 kernel: audit: type=1400 audit(1752109730.049:1524): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:50.049000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00e9c4c60 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:08:50.049000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:50.087000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:50.087000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c00e9c4c90 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:08:50.087000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:50.629000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:50.629000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c007d29650 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:08:50.629000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:50.675918 env[1246]: time="2025-07-10T01:08:50.675795144Z" level=error msg="ExecSync for \"3b710d5115631c01c0bb6a1f8e81b1960ad3db7e6b2e11f87fe772194a7d57b0\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 10s exceeded: context deadline exceeded" Jul 10 01:08:53.257000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:53.257000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000914ce0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:08:53.257000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:53.321000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:53.321000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000914d20 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:08:53.321000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:53.336000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:53.336000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00143c520 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:08:53.336000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:53.390000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:53.390000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c00143c5c0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:08:53.390000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:48.202 [WARNING][5325] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"3180f4c6-8ed5-4a0a-af99-8b3974a06a57", ResourceVersion:"956", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 9, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2e53d7934b6482f3ac27ea2f34485c9a578625713fdcd5a7b6226d239e4a181a", Pod:"goldmane-58fd7646b9-bxt4b", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali4dffb4e89d4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:48.338 [INFO][5325] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:48.340 [INFO][5325] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" iface="eth0" netns="" Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:48.346 [INFO][5325] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:48.346 [INFO][5325] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:56.770 [INFO][5367] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" HandleID="k8s-pod-network.0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:56.894 [INFO][5367] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:56.902 [INFO][5367] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:58.734 [WARNING][5367] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" HandleID="k8s-pod-network.0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:58.838 [INFO][5367] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" HandleID="k8s-pod-network.0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Workload="localhost-k8s-goldmane--58fd7646b9--bxt4b-eth0" Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:58.877 [INFO][5367] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:59.017852 env[1246]: 2025-07-10 01:08:58.952 [INFO][5325] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a" Jul 10 01:08:59.017852 env[1246]: time="2025-07-10T01:08:59.012124392Z" level=info msg="TearDown network for sandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\" successfully" Jul 10 01:08:59.304313 env[1246]: time="2025-07-10T01:08:59.079350688Z" level=info msg="RemovePodSandbox \"0c748852e9235ec6e5fbc1985f92fe7c7141349667e15b485ffb6fe202e8e80a\" returns successfully" Jul 10 01:09:23.057674 update_engine[1240]: I0710 01:09:23.050117 1240 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Jul 10 01:09:23.057674 update_engine[1240]: I0710 01:09:23.057627 1240 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Jul 10 01:09:23.194013 update_engine[1240]: I0710 01:09:23.086848 1240 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Jul 10 01:09:23.194013 update_engine[1240]: I0710 01:09:23.090816 1240 omaha_request_params.cc:62] Current group set to lts Jul 10 01:09:23.194013 update_engine[1240]: I0710 01:09:23.120862 1240 update_attempter.cc:499] Already updated boot flags. Skipping. Jul 10 01:09:23.194013 update_engine[1240]: I0710 01:09:23.120874 1240 update_attempter.cc:643] Scheduling an action processor start. Jul 10 01:09:23.194013 update_engine[1240]: I0710 01:09:23.124279 1240 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 10 01:09:23.194013 update_engine[1240]: I0710 01:09:23.130820 1240 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Jul 10 01:09:23.194013 update_engine[1240]: I0710 01:09:23.136466 1240 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 10 01:09:23.194013 update_engine[1240]: I0710 01:09:23.136478 1240 omaha_request_action.cc:271] Request: Jul 10 01:09:23.194013 update_engine[1240]: Jul 10 01:09:23.194013 update_engine[1240]: Jul 10 01:09:23.194013 update_engine[1240]: Jul 10 01:09:23.194013 update_engine[1240]: Jul 10 01:09:23.194013 update_engine[1240]: Jul 10 01:09:23.194013 update_engine[1240]: Jul 10 01:09:23.194013 update_engine[1240]: Jul 10 01:09:23.194013 update_engine[1240]: Jul 10 01:09:23.194013 update_engine[1240]: I0710 01:09:23.136482 1240 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 10 01:09:23.231404 update_engine[1240]: I0710 01:09:23.231299 1240 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 10 01:09:23.232393 update_engine[1240]: E0710 01:09:23.232378 1240 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 10 01:09:23.232452 update_engine[1240]: I0710 01:09:23.232438 1240 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Jul 10 01:09:23.233276 locksmithd[1286]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Jul 10 01:09:34.031779 update_engine[1240]: I0710 01:09:34.014330 1240 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 10 01:09:34.166304 update_engine[1240]: I0710 01:09:34.054986 1240 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 10 01:09:34.166304 update_engine[1240]: E0710 01:09:34.057377 1240 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 10 01:09:34.166304 update_engine[1240]: I0710 01:09:34.061038 1240 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Jul 10 01:09:44.255420 update_engine[1240]: I0710 01:09:44.221801 1240 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 10 01:09:45.360766 update_engine[1240]: I0710 01:09:44.379251 1240 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 10 01:09:45.360766 update_engine[1240]: E0710 01:09:44.428440 1240 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 10 01:09:45.360766 update_engine[1240]: I0710 01:09:44.485653 1240 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Jul 10 01:09:47.126908 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 10 01:09:47.227002 kernel: audit: type=1400 audit(1752109785.669:1531): avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:09:47.239253 kernel: audit: type=1400 audit(1752109785.669:1532): avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:09:47.242313 kernel: audit: type=1300 audit(1752109785.669:1532): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0015540a0 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:09:47.246047 kernel: audit: type=1327 audit(1752109785.669:1532): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:47.246098 kernel: audit: type=1300 audit(1752109785.669:1531): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002278060 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:09:47.258023 kernel: audit: type=1327 audit(1752109785.669:1531): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:47.262771 kernel: audit: type=1400 audit(1752109786.502:1533): avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:09:47.267661 kernel: audit: type=1300 audit(1752109786.502:1533): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00035d200 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:09:47.281183 kernel: audit: type=1327 audit(1752109786.502:1533): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:45.669000 audit[4561]: AVC avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:09:45.669000 audit[4598]: AVC avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:09:45.669000 audit[4598]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0015540a0 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:09:45.669000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:45.669000 audit[4561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002278060 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:09:45.669000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:46.502000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:09:46.502000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00035d200 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:09:46.502000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:48.837000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:49.186240 kernel: audit: type=1400 audit(1752109788.837:1534): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:48.837000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0016b4100 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:09:48.837000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:48.893000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:48.893000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001b282d0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:09:48.893000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:54.392000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:56.039776 kernel: kauditd_printk_skb: 5 callbacks suppressed Jul 10 01:09:56.427721 kernel: audit: type=1400 audit(1752109794.392:1536): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:56.737911 kernel: audit: type=1300 audit(1752109794.392:1536): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c0017601e0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:09:56.758408 kernel: audit: type=1327 audit(1752109794.392:1536): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:56.786519 kernel: audit: type=1400 audit(1752109794.982:1537): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:56.810004 kernel: audit: type=1300 audit(1752109794.982:1537): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0016b41e0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:09:56.839352 kernel: audit: type=1327 audit(1752109794.982:1537): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:56.855152 kernel: audit: type=1400 audit(1752109795.020:1538): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:56.870160 kernel: audit: type=1300 audit(1752109795.020:1538): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0016b4220 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:09:56.883647 kernel: audit: type=1327 audit(1752109795.020:1538): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:56.883692 kernel: audit: type=1400 audit(1752109795.076:1539): avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:54.392000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c0017601e0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:09:54.392000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:54.982000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:54.982000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0016b41e0 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:09:54.982000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:55.020000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:55.020000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0016b4220 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:09:55.020000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:55.076000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:55.076000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001760200 a2=fc6 a3=0 items=0 ppid=1806 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:09:55.076000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:55.422472 1240 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:55.650647 1240 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 10 01:09:59.413282 update_engine[1240]: E0710 01:09:55.734974 1240 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:55.735059 1240 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:55.735069 1240 omaha_request_action.cc:621] Omaha request response: Jul 10 01:09:59.413282 update_engine[1240]: E0710 01:09:55.768500 1240 omaha_request_action.cc:640] Omaha request network transfer failed. Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:55.796973 1240 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:55.796991 1240 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:55.796994 1240 update_attempter.cc:306] Processing Done. Jul 10 01:09:59.413282 update_engine[1240]: E0710 01:09:55.823649 1240 update_attempter.cc:619] Update failed. Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:55.823668 1240 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:55.823671 1240 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:55.823674 1240 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:56.044354 1240 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:56.108071 1240 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 10 01:09:59.413282 update_engine[1240]: I0710 01:09:56.108093 1240 omaha_request_action.cc:271] Request: Jul 10 01:09:59.413282 update_engine[1240]: Jul 10 01:09:59.413282 update_engine[1240]: Jul 10 01:09:59.922668 locksmithd[1286]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Jul 10 01:09:59.922668 locksmithd[1286]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Jul 10 01:10:00.073236 update_engine[1240]: Jul 10 01:10:00.073236 update_engine[1240]: Jul 10 01:10:00.073236 update_engine[1240]: Jul 10 01:10:00.073236 update_engine[1240]: Jul 10 01:10:00.073236 update_engine[1240]: I0710 01:09:56.108098 1240 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 10 01:10:00.073236 update_engine[1240]: I0710 01:09:56.177572 1240 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 10 01:10:00.073236 update_engine[1240]: E0710 01:09:56.194931 1240 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 10 01:10:00.073236 update_engine[1240]: I0710 01:09:56.194998 1240 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 10 01:10:00.073236 update_engine[1240]: I0710 01:09:56.195006 1240 omaha_request_action.cc:621] Omaha request response: Jul 10 01:10:00.073236 update_engine[1240]: I0710 01:09:56.195012 1240 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 10 01:10:00.073236 update_engine[1240]: I0710 01:09:56.195015 1240 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 10 01:10:00.073236 update_engine[1240]: I0710 01:09:56.195017 1240 update_attempter.cc:306] Processing Done. Jul 10 01:10:00.073236 update_engine[1240]: I0710 01:09:56.195020 1240 update_attempter.cc:310] Error event sent. Jul 10 01:10:00.073236 update_engine[1240]: I0710 01:09:56.195040 1240 update_check_scheduler.cc:74] Next update check in 44m10s Jul 10 01:10:02.735392 systemd[1]: cri-containerd-b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359.scope: Deactivated successfully. Jul 10 01:10:03.118930 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:10:03.133450 kernel: audit: type=1334 audit(1752109802.749:1540): prog-id=117 op=UNLOAD Jul 10 01:10:03.133544 kernel: audit: type=1334 audit(1752109802.752:1541): prog-id=120 op=UNLOAD Jul 10 01:10:02.749000 audit: BPF prog-id=117 op=UNLOAD Jul 10 01:10:02.752000 audit: BPF prog-id=120 op=UNLOAD Jul 10 01:10:03.167084 env[1246]: time="2025-07-10T01:10:02.891180126Z" level=info msg="shim disconnected" id=b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359 Jul 10 01:10:03.167084 env[1246]: time="2025-07-10T01:10:02.891234007Z" level=warning msg="cleaning up after shim disconnected" id=b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359 namespace=k8s.io Jul 10 01:10:03.167084 env[1246]: time="2025-07-10T01:10:02.891241688Z" level=info msg="cleaning up dead shim" Jul 10 01:10:03.167084 env[1246]: time="2025-07-10T01:10:02.899381219Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:10:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5435 runtime=io.containerd.runc.v2\n" Jul 10 01:10:02.750391 systemd[1]: cri-containerd-b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359.scope: Consumed 12.142s CPU time. Jul 10 01:10:02.923237 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359-rootfs.mount: Deactivated successfully. Jul 10 01:10:03.153725 systemd[1]: cri-containerd-ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304.scope: Deactivated successfully. Jul 10 01:10:03.153922 systemd[1]: cri-containerd-ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304.scope: Consumed 3.209s CPU time. Jul 10 01:10:03.191321 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304-rootfs.mount: Deactivated successfully. Jul 10 01:10:03.193087 env[1246]: time="2025-07-10T01:10:03.193052592Z" level=info msg="shim disconnected" id=ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304 Jul 10 01:10:03.193087 env[1246]: time="2025-07-10T01:10:03.193085464Z" level=warning msg="cleaning up after shim disconnected" id=ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304 namespace=k8s.io Jul 10 01:10:03.193169 env[1246]: time="2025-07-10T01:10:03.193091852Z" level=info msg="cleaning up dead shim" Jul 10 01:10:03.196108 kernel: audit: type=1334 audit(1752109803.193:1542): prog-id=84 op=UNLOAD Jul 10 01:10:03.198500 kernel: audit: type=1334 audit(1752109803.193:1543): prog-id=102 op=UNLOAD Jul 10 01:10:03.193000 audit: BPF prog-id=84 op=UNLOAD Jul 10 01:10:03.193000 audit: BPF prog-id=102 op=UNLOAD Jul 10 01:10:03.201650 env[1246]: time="2025-07-10T01:10:03.201621583Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:10:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5465 runtime=io.containerd.runc.v2\n" Jul 10 01:10:03.407000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:03.452634 kernel: audit: type=1400 audit(1752109803.407:1544): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:03.452718 kernel: audit: type=1300 audit(1752109803.407:1544): arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c004c900c0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:10:03.452749 kernel: audit: type=1327 audit(1752109803.407:1544): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:03.407000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c004c900c0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:10:03.407000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:03.467000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:03.467000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c004c90810 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:10:03.477045 kernel: audit: type=1400 audit(1752109803.467:1545): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:03.477128 kernel: audit: type=1300 audit(1752109803.467:1545): arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c004c90810 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:10:03.467000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:03.482215 kernel: audit: type=1327 audit(1752109803.467:1545): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:03.507000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:03.507000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=2f a1=c004c90a50 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:10:03.507000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:03.528000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:03.528000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=2f a1=c0083eef20 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:10:03.528000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:03.611000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:03.611000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0083ef120 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:10:03.611000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:03.657000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:03.657000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c009c1f4d0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:10:03.657000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:04.161084 systemd[1]: cri-containerd-5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61.scope: Deactivated successfully. Jul 10 01:10:04.161261 systemd[1]: cri-containerd-5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61.scope: Consumed 1.520s CPU time. Jul 10 01:10:04.163000 audit: BPF prog-id=80 op=UNLOAD Jul 10 01:10:04.163000 audit: BPF prog-id=96 op=UNLOAD Jul 10 01:10:04.210433 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61-rootfs.mount: Deactivated successfully. Jul 10 01:10:04.211836 env[1246]: time="2025-07-10T01:10:04.211805138Z" level=info msg="shim disconnected" id=5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61 Jul 10 01:10:04.212144 env[1246]: time="2025-07-10T01:10:04.212131665Z" level=warning msg="cleaning up after shim disconnected" id=5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61 namespace=k8s.io Jul 10 01:10:04.212226 env[1246]: time="2025-07-10T01:10:04.212215268Z" level=info msg="cleaning up dead shim" Jul 10 01:10:04.217839 env[1246]: time="2025-07-10T01:10:04.217814917Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:10:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5490 runtime=io.containerd.runc.v2\n" Jul 10 01:10:05.445873 sshd[5359]: pam_unix(sshd:session): session closed for user core Jul 10 01:10:05.464000 audit[5359]: USER_END pid=5359 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:05.464000 audit[5359]: CRED_DISP pid=5359 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:05.466000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.108:22-139.178.68.195:54508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:05.467086 systemd[1]: sshd@9-139.178.70.108:22-139.178.68.195:54508.service: Deactivated successfully. Jul 10 01:10:05.467723 systemd[1]: session-11.scope: Deactivated successfully. Jul 10 01:10:05.467837 systemd[1]: session-11.scope: Consumed 5.370s CPU time. Jul 10 01:10:05.468496 systemd-logind[1238]: Session 11 logged out. Waiting for processes to exit. Jul 10 01:10:05.476559 systemd-logind[1238]: Removed session 11. Jul 10 01:10:05.742424 kubelet[2106]: E0710 01:10:05.742267 2106 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 10s exceeded: context deadline exceeded" containerID="3b710d5115631c01c0bb6a1f8e81b1960ad3db7e6b2e11f87fe772194a7d57b0" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Jul 10 01:10:05.794893 env[1246]: time="2025-07-10T01:10:05.794816214Z" level=info msg="StopPodSandbox for \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\"" Jul 10 01:10:05.797372 env[1246]: time="2025-07-10T01:10:05.796500404Z" level=info msg="StartContainer for \"4dc560982807b4453052767cbc366a68adc9f7a36b6d7fbf205092a8f9a69e7d\"" Jul 10 01:10:05.848128 systemd[1]: Started cri-containerd-4dc560982807b4453052767cbc366a68adc9f7a36b6d7fbf205092a8f9a69e7d.scope. Jul 10 01:10:05.921000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.921000 audit[5522]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f13a423f808 items=0 ppid=4262 pid=5522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:05.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464633536303938323830376234343533303532373637636263333636 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit: BPF prog-id=239 op=LOAD Jul 10 01:10:05.922000 audit[5522]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003ec3a8 items=0 ppid=4262 pid=5522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:05.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464633536303938323830376234343533303532373637636263333636 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit: BPF prog-id=240 op=LOAD Jul 10 01:10:05.922000 audit[5522]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003ec3f8 items=0 ppid=4262 pid=5522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:05.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464633536303938323830376234343533303532373637636263333636 Jul 10 01:10:05.922000 audit: BPF prog-id=240 op=UNLOAD Jul 10 01:10:05.922000 audit: BPF prog-id=239 op=UNLOAD Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { perfmon } for pid=5522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit[5522]: AVC avc: denied { bpf } for pid=5522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:05.922000 audit: BPF prog-id=241 op=LOAD Jul 10 01:10:05.922000 audit[5522]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003ec488 items=0 ppid=4262 pid=5522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:05.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464633536303938323830376234343533303532373637636263333636 Jul 10 01:10:06.018371 env[1246]: time="2025-07-10T01:10:05.958132416Z" level=info msg="StartContainer for \"4dc560982807b4453052767cbc366a68adc9f7a36b6d7fbf205092a8f9a69e7d\" returns successfully" Jul 10 01:10:06.310260 kubelet[2106]: E0710 01:10:06.310231 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1m49.997s" Jul 10 01:10:06.948348 systemd[1]: run-containerd-runc-k8s.io-3b710d5115631c01c0bb6a1f8e81b1960ad3db7e6b2e11f87fe772194a7d57b0-runc.HVnlam.mount: Deactivated successfully. Jul 10 01:10:06.952910 systemd[1]: run-containerd-runc-k8s.io-46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde-runc.bZfEe9.mount: Deactivated successfully. Jul 10 01:10:07.670910 kubelet[2106]: I0710 01:10:07.670744 2106 scope.go:117] "RemoveContainer" containerID="ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304" Jul 10 01:10:07.884484 kubelet[2106]: I0710 01:10:07.651832 2106 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 10 01:10:07.884484 kubelet[2106]: I0710 01:10:07.704817 2106 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 10 01:10:07.693303 systemd[1]: run-containerd-runc-k8s.io-8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc-runc.25b4cW.mount: Deactivated successfully. Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:07.337 [WARNING][5581] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0", GenerateName:"calico-apiserver-c7878fddc-", Namespace:"calico-apiserver", SelfLink:"", UID:"286d1b36-f2b8-4812-b1e3-9fca1cab12f4", ResourceVersion:"1522", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c7878fddc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7", Pod:"calico-apiserver-c7878fddc-z4gjh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali63e8892b9d8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:07.349 [INFO][5581] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:07.349 [INFO][5581] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" iface="eth0" netns="" Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:07.350 [INFO][5581] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:07.350 [INFO][5581] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:08.089 [INFO][5620] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" HandleID="k8s-pod-network.f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:08.095 [INFO][5620] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:08.095 [INFO][5620] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:08.132 [WARNING][5620] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" HandleID="k8s-pod-network.f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:08.132 [INFO][5620] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" HandleID="k8s-pod-network.f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:08.133 [INFO][5620] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:10:08.156591 env[1246]: 2025-07-10 01:10:08.139 [INFO][5581] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:10:08.185944 env[1246]: time="2025-07-10T01:10:08.157446194Z" level=info msg="TearDown network for sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\" successfully" Jul 10 01:10:08.185944 env[1246]: time="2025-07-10T01:10:08.157467869Z" level=info msg="StopPodSandbox for \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\" returns successfully" Jul 10 01:10:08.188918 env[1246]: time="2025-07-10T01:10:08.187232913Z" level=info msg="RemovePodSandbox for \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\"" Jul 10 01:10:08.188918 env[1246]: time="2025-07-10T01:10:08.187265216Z" level=info msg="Forcibly stopping sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\"" Jul 10 01:10:08.254380 env[1246]: time="2025-07-10T01:10:08.254350052Z" level=info msg="CreateContainer within sandbox \"36994ee7c20691b6aa0c560c02f0e838f510122aed250d3960d4892028bec8ea\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 10 01:10:08.254646 kubelet[2106]: I0710 01:10:08.254632 2106 scope.go:117] "RemoveContainer" containerID="5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61" Jul 10 01:10:08.258925 env[1246]: time="2025-07-10T01:10:08.258861029Z" level=info msg="CreateContainer within sandbox \"a588db7f7968a15fd1970fc5a82c9111c868d98058759c7a695dcc380d054906\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Jul 10 01:10:08.288750 kubelet[2106]: I0710 01:10:08.288725 2106 scope.go:117] "RemoveContainer" containerID="b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359" Jul 10 01:10:08.317107 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2366574485.mount: Deactivated successfully. Jul 10 01:10:08.321803 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1026919263.mount: Deactivated successfully. Jul 10 01:10:08.326076 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4109261017.mount: Deactivated successfully. Jul 10 01:10:08.328949 env[1246]: time="2025-07-10T01:10:08.328703213Z" level=info msg="CreateContainer within sandbox \"36994ee7c20691b6aa0c560c02f0e838f510122aed250d3960d4892028bec8ea\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"4b7d3caca20f67be8bae4fdbfe3bb513354cc7867ca80b3579468c006c4a2396\"" Jul 10 01:10:08.330521 env[1246]: time="2025-07-10T01:10:08.330466553Z" level=info msg="CreateContainer within sandbox \"a588db7f7968a15fd1970fc5a82c9111c868d98058759c7a695dcc380d054906\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"f6c4737e3e81d568549f9de1532bbc706ff5423b3f1709ff141ef8d73daf3cbd\"" Jul 10 01:10:08.363825 kubelet[2106]: I0710 01:10:08.337164 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-qgl94" podStartSLOduration=198.341486945 podStartE2EDuration="3m58.279017104s" podCreationTimestamp="2025-07-10 01:06:10 +0000 UTC" firstStartedPulling="2025-07-10 01:06:39.977700246 +0000 UTC m=+47.036650523" lastFinishedPulling="2025-07-10 01:07:19.915230403 +0000 UTC m=+86.974180682" observedRunningTime="2025-07-10 01:10:08.273653956 +0000 UTC m=+255.332604235" watchObservedRunningTime="2025-07-10 01:10:08.279017104 +0000 UTC m=+255.337967387" Jul 10 01:10:08.364948 env[1246]: time="2025-07-10T01:10:08.364915330Z" level=info msg="StartContainer for \"4b7d3caca20f67be8bae4fdbfe3bb513354cc7867ca80b3579468c006c4a2396\"" Jul 10 01:10:08.365239 env[1246]: time="2025-07-10T01:10:08.364926817Z" level=info msg="StartContainer for \"f6c4737e3e81d568549f9de1532bbc706ff5423b3f1709ff141ef8d73daf3cbd\"" Jul 10 01:10:08.373247 env[1246]: time="2025-07-10T01:10:08.373214901Z" level=info msg="CreateContainer within sandbox \"ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 10 01:10:08.377915 kubelet[2106]: I0710 01:10:08.377873 2106 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-bxt4b" podStartSLOduration=209.833255151 podStartE2EDuration="3m59.377855496s" podCreationTimestamp="2025-07-10 01:06:09 +0000 UTC" firstStartedPulling="2025-07-10 01:06:39.977716857 +0000 UTC m=+47.036667135" lastFinishedPulling="2025-07-10 01:07:09.522317202 +0000 UTC m=+76.581267480" observedRunningTime="2025-07-10 01:10:08.364783043 +0000 UTC m=+255.423733322" watchObservedRunningTime="2025-07-10 01:10:08.377855496 +0000 UTC m=+255.436805778" Jul 10 01:10:08.441021 env[1246]: time="2025-07-10T01:10:08.440825980Z" level=info msg="CreateContainer within sandbox \"ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5\"" Jul 10 01:10:08.441570 env[1246]: time="2025-07-10T01:10:08.441534452Z" level=info msg="StartContainer for \"e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5\"" Jul 10 01:10:08.501011 systemd[1]: Started cri-containerd-4b7d3caca20f67be8bae4fdbfe3bb513354cc7867ca80b3579468c006c4a2396.scope. Jul 10 01:10:08.501950 systemd[1]: Started cri-containerd-e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5.scope. Jul 10 01:10:08.502810 systemd[1]: Started cri-containerd-f6c4737e3e81d568549f9de1532bbc706ff5423b3f1709ff141ef8d73daf3cbd.scope. Jul 10 01:10:08.546880 kernel: kauditd_printk_skb: 60 callbacks suppressed Jul 10 01:10:08.587014 kernel: audit: type=1400 audit(1752109808.542:1561): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.602457 kernel: audit: type=1400 audit(1752109808.542:1562): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.611168 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 01:10:08.611245 kernel: audit: type=1400 audit(1752109808.542:1563): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.631982 kernel: audit: audit_lost=26 audit_rate_limit=0 audit_backlog_limit=64 Jul 10 01:10:08.652101 kernel: audit: backlog limit exceeded Jul 10 01:10:08.652155 kernel: audit: type=1400 audit(1752109808.542:1564): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.664391 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 01:10:08.664423 kernel: audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 Jul 10 01:10:08.664441 kernel: audit: backlog limit exceeded Jul 10 01:10:08.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.545000 audit: BPF prog-id=242 op=LOAD Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2230 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533336338343839613965616165303636323163343033646230343734 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2230 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533336338343839613965616165303636323163343033646230343734 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit: BPF prog-id=243 op=LOAD Jul 10 01:10:08.546000 audit[5698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002769b0 items=0 ppid=2230 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533336338343839613965616165303636323163343033646230343734 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit: BPF prog-id=244 op=LOAD Jul 10 01:10:08.546000 audit[5698]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002769f8 items=0 ppid=2230 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533336338343839613965616165303636323163343033646230343734 Jul 10 01:10:08.546000 audit: BPF prog-id=244 op=UNLOAD Jul 10 01:10:08.546000 audit: BPF prog-id=243 op=UNLOAD Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.546000 audit: BPF prog-id=245 op=LOAD Jul 10 01:10:08.546000 audit[5698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000276e08 items=0 ppid=2230 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533336338343839613965616165303636323163343033646230343734 Jul 10 01:10:08.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.558000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.558000 audit[5673]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1796 pid=5673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.558000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636633437333765336538316435363835343966396465313533326262 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1796 pid=5673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636633437333765336538316435363835343966396465313533326262 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit: BPF prog-id=247 op=LOAD Jul 10 01:10:08.560000 audit[5673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003790c0 items=0 ppid=1796 pid=5673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636633437333765336538316435363835343966396465313533326262 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit: BPF prog-id=248 op=LOAD Jul 10 01:10:08.560000 audit[5673]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000379108 items=0 ppid=1796 pid=5673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636633437333765336538316435363835343966396465313533326262 Jul 10 01:10:08.560000 audit: BPF prog-id=248 op=UNLOAD Jul 10 01:10:08.560000 audit: BPF prog-id=247 op=UNLOAD Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { perfmon } for pid=5673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit[5673]: AVC avc: denied { bpf } for pid=5673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.560000 audit: BPF prog-id=249 op=LOAD Jul 10 01:10:08.560000 audit[5673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000379518 items=0 ppid=1796 pid=5673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636633437333765336538316435363835343966396465313533326262 Jul 10 01:10:08.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.570000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.570000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.570000 audit: BPF prog-id=250 op=LOAD Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1806 pid=5668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462376433636163613230663637626538626165346664626665336262 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1806 pid=5668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462376433636163613230663637626538626165346664626665336262 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit: BPF prog-id=251 op=LOAD Jul 10 01:10:08.571000 audit[5668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000214420 items=0 ppid=1806 pid=5668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462376433636163613230663637626538626165346664626665336262 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit: BPF prog-id=252 op=LOAD Jul 10 01:10:08.571000 audit[5668]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000214468 items=0 ppid=1806 pid=5668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462376433636163613230663637626538626165346664626665336262 Jul 10 01:10:08.571000 audit: BPF prog-id=252 op=UNLOAD Jul 10 01:10:08.571000 audit: BPF prog-id=251 op=UNLOAD Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { perfmon } for pid=5668 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit[5668]: AVC avc: denied { bpf } for pid=5668 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:10:08.571000 audit: BPF prog-id=253 op=LOAD Jul 10 01:10:08.571000 audit[5668]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000214878 items=0 ppid=1806 pid=5668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:08.571000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462376433636163613230663637626538626165346664626665336262 Jul 10 01:10:08.811198 env[1246]: time="2025-07-10T01:10:08.598283727Z" level=info msg="StartContainer for \"e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5\" returns successfully" Jul 10 01:10:08.811198 env[1246]: time="2025-07-10T01:10:08.652059799Z" level=info msg="StartContainer for \"f6c4737e3e81d568549f9de1532bbc706ff5423b3f1709ff141ef8d73daf3cbd\" returns successfully" Jul 10 01:10:08.811198 env[1246]: time="2025-07-10T01:10:08.662865085Z" level=info msg="StartContainer for \"4b7d3caca20f67be8bae4fdbfe3bb513354cc7867ca80b3579468c006c4a2396\" returns successfully" Jul 10 01:10:10.558227 systemd[1]: Started sshd@10-139.178.70.108:22-139.178.68.195:38352.service. Jul 10 01:10:10.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.108:22-139.178.68.195:38352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:11.308000 audit[5759]: USER_ACCT pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:11.311000 audit[5759]: CRED_ACQ pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:11.311000 audit[5759]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff78020350 a2=3 a3=0 items=0 ppid=1 pid=5759 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:11.311000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:10:11.407221 sshd[5759]: Accepted publickey for core from 139.178.68.195 port 38352 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:10:11.326754 sshd[5759]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:10:11.521692 systemd-logind[1238]: New session 12 of user core. Jul 10 01:10:11.532000 audit[5759]: USER_START pid=5759 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:11.533000 audit[5765]: CRED_ACQ pid=5765 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:11.528154 systemd[1]: Started session-12.scope. Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:12.280 [WARNING][5653] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0", GenerateName:"calico-apiserver-c7878fddc-", Namespace:"calico-apiserver", SelfLink:"", UID:"286d1b36-f2b8-4812-b1e3-9fca1cab12f4", ResourceVersion:"1544", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 7, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"c7878fddc", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7", Pod:"calico-apiserver-c7878fddc-z4gjh", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali63e8892b9d8", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:12.340 [INFO][5653] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:12.344 [INFO][5653] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" iface="eth0" netns="" Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:12.346 [INFO][5653] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:12.346 [INFO][5653] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:13.045 [INFO][5775] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" HandleID="k8s-pod-network.f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:13.057 [INFO][5775] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:13.059 [INFO][5775] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:13.126 [WARNING][5775] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" HandleID="k8s-pod-network.f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:13.126 [INFO][5775] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" HandleID="k8s-pod-network.f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:13.128 [INFO][5775] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:10:13.205360 env[1246]: 2025-07-10 01:10:13.155 [INFO][5653] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67" Jul 10 01:10:13.205360 env[1246]: time="2025-07-10T01:10:13.199081625Z" level=info msg="TearDown network for sandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\" successfully" Jul 10 01:10:13.205360 env[1246]: time="2025-07-10T01:10:13.212614903Z" level=info msg="RemovePodSandbox \"f38b86c6c2c5e53013c83e741df6969a3a5cfd526d8a1c2a419f5601616e2a67\" returns successfully" Jul 10 01:10:16.729242 kernel: kauditd_printk_skb: 177 callbacks suppressed Jul 10 01:10:16.802060 kernel: audit: type=1400 audit(1752109816.707:1617): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:16.812100 kernel: audit: type=1300 audit(1752109816.707:1617): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00005a500 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:16.816618 kernel: audit: type=1327 audit(1752109816.707:1617): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:16.818790 kernel: audit: type=1400 audit(1752109816.720:1618): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:16.818822 kernel: audit: type=1300 audit(1752109816.720:1618): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0005ecdb0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:16.818840 kernel: audit: type=1327 audit(1752109816.720:1618): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:16.707000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:16.707000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00005a500 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:16.707000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:16.720000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:16.720000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0005ecdb0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:16.720000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:19.286498 env[1246]: time="2025-07-10T01:10:19.286464327Z" level=info msg="StopPodSandbox for \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\"" Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:19.864 [WARNING][5809] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3742d2bc-3ce5-4ffe-9879-3341b15e467d", ResourceVersion:"1315", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 5, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1", Pod:"coredns-7c65d6cfc9-vlpgt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali904a33c6123", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:19.879 [INFO][5809] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:19.879 [INFO][5809] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" iface="eth0" netns="" Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:19.879 [INFO][5809] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:19.879 [INFO][5809] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:20.441 [INFO][5819] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" HandleID="k8s-pod-network.bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:20.449 [INFO][5819] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:20.451 [INFO][5819] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:20.513 [WARNING][5819] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" HandleID="k8s-pod-network.bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:20.513 [INFO][5819] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" HandleID="k8s-pod-network.bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:20.515 [INFO][5819] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:10:20.527754 env[1246]: 2025-07-10 01:10:20.521 [INFO][5809] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:10:20.592592 env[1246]: time="2025-07-10T01:10:20.528414646Z" level=info msg="TearDown network for sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\" successfully" Jul 10 01:10:20.592592 env[1246]: time="2025-07-10T01:10:20.528436060Z" level=info msg="StopPodSandbox for \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\" returns successfully" Jul 10 01:10:21.201236 sshd[5759]: pam_unix(sshd:session): session closed for user core Jul 10 01:10:21.236000 audit[5759]: USER_END pid=5759 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:21.250921 kernel: audit: type=1106 audit(1752109821.236:1619): pid=5759 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:21.252211 kernel: audit: type=1104 audit(1752109821.240:1620): pid=5759 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:21.240000 audit[5759]: CRED_DISP pid=5759 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:21.260813 systemd[1]: sshd@10-139.178.70.108:22-139.178.68.195:38352.service: Deactivated successfully. Jul 10 01:10:21.269128 kernel: audit: type=1131 audit(1752109821.262:1621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.108:22-139.178.68.195:38352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:21.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.108:22-139.178.68.195:38352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:21.267916 systemd[1]: session-12.scope: Deactivated successfully. Jul 10 01:10:21.268055 systemd[1]: session-12.scope: Consumed 1.123s CPU time. Jul 10 01:10:21.269904 systemd-logind[1238]: Session 12 logged out. Waiting for processes to exit. Jul 10 01:10:21.282710 systemd-logind[1238]: Removed session 12. Jul 10 01:10:21.430230 env[1246]: time="2025-07-10T01:10:21.430178693Z" level=info msg="RemovePodSandbox for \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\"" Jul 10 01:10:21.430415 env[1246]: time="2025-07-10T01:10:21.430229919Z" level=info msg="Forcibly stopping sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\"" Jul 10 01:10:21.645262 kubelet[2106]: E0710 01:10:21.645226 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="11.812s" Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:22.848 [WARNING][5836] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3742d2bc-3ce5-4ffe-9879-3341b15e467d", ResourceVersion:"1315", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 5, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5f3ed05ca119def45ea1aba2b4a0601509eac12e46d325dc2a509dd8f39c13b1", Pod:"coredns-7c65d6cfc9-vlpgt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali904a33c6123", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:22.874 [INFO][5836] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:22.876 [INFO][5836] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" iface="eth0" netns="" Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:22.876 [INFO][5836] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:22.876 [INFO][5836] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:23.777 [INFO][5843] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" HandleID="k8s-pod-network.bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:23.799 [INFO][5843] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:23.806 [INFO][5843] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:23.906 [WARNING][5843] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" HandleID="k8s-pod-network.bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:23.906 [INFO][5843] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" HandleID="k8s-pod-network.bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Workload="localhost-k8s-coredns--7c65d6cfc9--vlpgt-eth0" Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:23.910 [INFO][5843] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:10:23.964923 env[1246]: 2025-07-10 01:10:23.921 [INFO][5836] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6" Jul 10 01:10:23.964923 env[1246]: time="2025-07-10T01:10:23.965093858Z" level=info msg="TearDown network for sandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\" successfully" Jul 10 01:10:24.527772 env[1246]: time="2025-07-10T01:10:24.044963452Z" level=info msg="RemovePodSandbox \"bd9cdeffd81b23807149a20b0c6efaf2ea761144de1820d5497c7aaba776b3b6\" returns successfully" Jul 10 01:10:24.652846 env[1246]: time="2025-07-10T01:10:24.652500275Z" level=info msg="StopPodSandbox for \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\"" Jul 10 01:10:25.076540 kubelet[2106]: E0710 01:10:25.070677 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.351s" Jul 10 01:10:26.241816 systemd[1]: Started sshd@11-139.178.70.108:22-139.178.68.195:49746.service. Jul 10 01:10:26.357390 kernel: audit: type=1130 audit(1752109826.246:1622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.108:22-139.178.68.195:49746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:26.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.108:22-139.178.68.195:49746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:27.207474 kernel: audit: type=1101 audit(1752109827.202:1623): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:27.243870 kernel: audit: type=1103 audit(1752109827.215:1624): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:27.243965 kernel: audit: type=1006 audit(1752109827.215:1625): pid=5884 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 10 01:10:27.247529 kernel: audit: type=1300 audit(1752109827.215:1625): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbb7df880 a2=3 a3=0 items=0 ppid=1 pid=5884 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:27.253429 kernel: audit: type=1327 audit(1752109827.215:1625): proctitle=737368643A20636F7265205B707269765D Jul 10 01:10:27.202000 audit[5884]: USER_ACCT pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:27.215000 audit[5884]: CRED_ACQ pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:27.215000 audit[5884]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbb7df880 a2=3 a3=0 items=0 ppid=1 pid=5884 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:27.215000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:10:27.433634 sshd[5884]: Accepted publickey for core from 139.178.68.195 port 49746 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:10:27.232464 sshd[5884]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:10:27.575282 systemd-logind[1238]: New session 13 of user core. Jul 10 01:10:27.583343 systemd[1]: Started session-13.scope. Jul 10 01:10:27.638526 kernel: audit: type=1105 audit(1752109827.600:1626): pid=5884 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:27.638603 kernel: audit: type=1103 audit(1752109827.629:1627): pid=5895 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:27.600000 audit[5884]: USER_START pid=5884 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:27.629000 audit[5895]: CRED_ACQ pid=5895 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:26.383 [WARNING][5858] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0", GenerateName:"calico-apiserver-6999bb78bb-", Namespace:"calico-apiserver", SelfLink:"", UID:"f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79", ResourceVersion:"1532", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6999bb78bb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717", Pod:"calico-apiserver-6999bb78bb-w7jtd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali00edc62a2de", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:26.423 [INFO][5858] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:26.423 [INFO][5858] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" iface="eth0" netns="" Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:26.427 [INFO][5858] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:26.427 [INFO][5858] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:28.816 [INFO][5886] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" HandleID="k8s-pod-network.a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:28.860 [INFO][5886] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:28.867 [INFO][5886] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:30.060 [WARNING][5886] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" HandleID="k8s-pod-network.a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:30.085 [INFO][5886] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" HandleID="k8s-pod-network.a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:30.135 [INFO][5886] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:10:30.302451 env[1246]: 2025-07-10 01:10:30.224 [INFO][5858] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:10:30.302451 env[1246]: time="2025-07-10T01:10:30.294635231Z" level=info msg="TearDown network for sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\" successfully" Jul 10 01:10:30.302451 env[1246]: time="2025-07-10T01:10:30.294661483Z" level=info msg="StopPodSandbox for \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\" returns successfully" Jul 10 01:10:36.803000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7350 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:10:37.099793 kernel: audit: type=1400 audit(1752109836.803:1628): avc: denied { watch } for pid=5714 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7350 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:10:37.111770 kernel: audit: type=1300 audit(1752109836.803:1628): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b5c980 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:37.111829 kernel: audit: type=1327 audit(1752109836.803:1628): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:37.111863 kernel: audit: type=1400 audit(1752109836.833:1629): avc: denied { watch } for pid=5714 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=8241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:10:37.115563 kernel: audit: type=1300 audit(1752109836.833:1629): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b6a5a0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:37.118591 kernel: audit: type=1327 audit(1752109836.833:1629): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:36.803000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b5c980 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:36.803000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:36.833000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=8241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:10:36.833000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b6a5a0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:36.833000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:40.010000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:40.222913 kernel: audit: type=1400 audit(1752109840.010:1630): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:40.248754 kernel: audit: type=1300 audit(1752109840.010:1630): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cbb5c0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:40.248816 kernel: audit: type=1327 audit(1752109840.010:1630): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:40.256453 kernel: audit: type=1400 audit(1752109840.023:1631): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:40.010000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cbb5c0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:40.010000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:40.023000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:40.023000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cbb900 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:40.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:40.023000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:40.023000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000cbb920 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:40.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:40.023000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:40.023000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000cbb940 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:40.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:41.427000 audit[5911]: AVC avc: denied { execute } for pid=5911 comm="kube-controller" name="uds" dev="sda9" ino=8428 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 10 01:10:41.427000 audit[5911]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c0002b5720 a1=c001bb5338 a2=c001b6f500 a3=0 items=0 ppid=5714 pid=5911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:10:41.427000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:44.841000 audit[5913]: NETFILTER_CFG table=filter:131 family=2 entries=17 op=nft_register_rule pid=5913 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:45.197333 kernel: kauditd_printk_skb: 11 callbacks suppressed Jul 10 01:10:45.240182 kernel: audit: type=1325 audit(1752109844.841:1635): table=filter:131 family=2 entries=17 op=nft_register_rule pid=5913 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:45.240277 kernel: audit: type=1300 audit(1752109844.841:1635): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffce3c65e30 a2=0 a3=7ffce3c65e1c items=0 ppid=2209 pid=5913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:45.247780 kernel: audit: type=1327 audit(1752109844.841:1635): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:45.253110 kernel: audit: type=1325 audit(1752109844.885:1636): table=nat:132 family=2 entries=51 op=nft_register_chain pid=5913 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:45.253151 kernel: audit: type=1300 audit(1752109844.885:1636): arch=c000003e syscall=46 success=yes exit=22468 a0=3 a1=7ffce3c65e30 a2=0 a3=7ffce3c65e1c items=0 ppid=2209 pid=5913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:45.253180 kernel: audit: type=1327 audit(1752109844.885:1636): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:45.253222 kernel: audit: type=1325 audit(1752109845.127:1637): table=filter:133 family=2 entries=12 op=nft_register_rule pid=5916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:45.253248 kernel: audit: type=1300 audit(1752109845.127:1637): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe96259210 a2=0 a3=7ffe962591fc items=0 ppid=2209 pid=5916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:45.257377 kernel: audit: type=1327 audit(1752109845.127:1637): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:45.257417 kernel: audit: type=1325 audit(1752109845.134:1638): table=nat:134 family=2 entries=22 op=nft_register_rule pid=5916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:44.841000 audit[5913]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffce3c65e30 a2=0 a3=7ffce3c65e1c items=0 ppid=2209 pid=5913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:44.841000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:44.885000 audit[5913]: NETFILTER_CFG table=nat:132 family=2 entries=51 op=nft_register_chain pid=5913 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:44.885000 audit[5913]: SYSCALL arch=c000003e syscall=46 success=yes exit=22468 a0=3 a1=7ffce3c65e30 a2=0 a3=7ffce3c65e1c items=0 ppid=2209 pid=5913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:44.885000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:45.127000 audit[5916]: NETFILTER_CFG table=filter:133 family=2 entries=12 op=nft_register_rule pid=5916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:45.127000 audit[5916]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe96259210 a2=0 a3=7ffe962591fc items=0 ppid=2209 pid=5916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:45.127000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:45.134000 audit[5916]: NETFILTER_CFG table=nat:134 family=2 entries=22 op=nft_register_rule pid=5916 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:45.134000 audit[5916]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffe96259210 a2=0 a3=7ffe962591fc items=0 ppid=2209 pid=5916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:45.134000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:46.051000 audit[4598]: AVC avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:10:46.051000 audit[4598]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001554460 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:10:46.051000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:10:46.051000 audit[4561]: AVC avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:10:46.051000 audit[4561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0022782e0 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:10:46.051000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:10:47.385000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:10:47.385000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00044a4e0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:10:47.385000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:10:52.066368 kernel: kauditd_printk_skb: 11 callbacks suppressed Jul 10 01:10:52.156276 kernel: audit: type=1325 audit(1752109852.042:1642): table=filter:135 family=2 entries=12 op=nft_register_rule pid=5918 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:52.163182 kernel: audit: type=1300 audit(1752109852.042:1642): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff2d9a8c20 a2=0 a3=7fff2d9a8c0c items=0 ppid=2209 pid=5918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:52.165508 kernel: audit: type=1327 audit(1752109852.042:1642): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:52.165541 kernel: audit: type=1325 audit(1752109852.055:1643): table=nat:136 family=2 entries=36 op=nft_register_rule pid=5918 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:52.166772 kernel: audit: type=1300 audit(1752109852.055:1643): arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7fff2d9a8c20 a2=0 a3=7fff2d9a8c0c items=0 ppid=2209 pid=5918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:52.168875 kernel: audit: type=1327 audit(1752109852.055:1643): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:52.042000 audit[5918]: NETFILTER_CFG table=filter:135 family=2 entries=12 op=nft_register_rule pid=5918 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:52.042000 audit[5918]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff2d9a8c20 a2=0 a3=7fff2d9a8c0c items=0 ppid=2209 pid=5918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:52.042000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:52.055000 audit[5918]: NETFILTER_CFG table=nat:136 family=2 entries=36 op=nft_register_rule pid=5918 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:52.055000 audit[5918]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7fff2d9a8c20 a2=0 a3=7fff2d9a8c0c items=0 ppid=2209 pid=5918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:52.055000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:59.268000 audit[5922]: NETFILTER_CFG table=filter:137 family=2 entries=12 op=nft_register_rule pid=5922 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:59.497364 kernel: audit: type=1325 audit(1752109859.268:1644): table=filter:137 family=2 entries=12 op=nft_register_rule pid=5922 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:59.510772 kernel: audit: type=1300 audit(1752109859.268:1644): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcd7601580 a2=0 a3=7ffcd760156c items=0 ppid=2209 pid=5922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:59.514853 kernel: audit: type=1327 audit(1752109859.268:1644): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:59.517350 kernel: audit: type=1325 audit(1752109859.281:1645): table=nat:138 family=2 entries=36 op=nft_register_rule pid=5922 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:59.517375 kernel: audit: type=1300 audit(1752109859.281:1645): arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffcd7601580 a2=0 a3=7ffcd760156c items=0 ppid=2209 pid=5922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:59.517392 kernel: audit: type=1327 audit(1752109859.281:1645): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:59.268000 audit[5922]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcd7601580 a2=0 a3=7ffcd760156c items=0 ppid=2209 pid=5922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:59.268000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:59.281000 audit[5922]: NETFILTER_CFG table=nat:138 family=2 entries=36 op=nft_register_rule pid=5922 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:59.281000 audit[5922]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffcd7601580 a2=0 a3=7ffcd760156c items=0 ppid=2209 pid=5922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:59.281000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:00.980000 audit[5926]: NETFILTER_CFG table=filter:139 family=2 entries=12 op=nft_register_rule pid=5926 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:01.149809 kernel: audit: type=1325 audit(1752109860.980:1646): table=filter:139 family=2 entries=12 op=nft_register_rule pid=5926 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:01.156306 kernel: audit: type=1300 audit(1752109860.980:1646): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcc2ff64f0 a2=0 a3=7ffcc2ff64dc items=0 ppid=2209 pid=5926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:01.156363 kernel: audit: type=1327 audit(1752109860.980:1646): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:01.158002 kernel: audit: type=1325 audit(1752109860.995:1647): table=nat:140 family=2 entries=38 op=nft_register_chain pid=5926 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:00.980000 audit[5926]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcc2ff64f0 a2=0 a3=7ffcc2ff64dc items=0 ppid=2209 pid=5926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:00.980000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:00.995000 audit[5926]: NETFILTER_CFG table=nat:140 family=2 entries=38 op=nft_register_chain pid=5926 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:00.995000 audit[5926]: SYSCALL arch=c000003e syscall=46 success=yes exit=11364 a0=3 a1=7ffcc2ff64f0 a2=0 a3=7ffcc2ff64dc items=0 ppid=2209 pid=5926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:00.995000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:01.032000 audit[5928]: NETFILTER_CFG table=filter:141 family=2 entries=12 op=nft_register_rule pid=5928 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:01.032000 audit[5928]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff2e36f930 a2=0 a3=7fff2e36f91c items=0 ppid=2209 pid=5928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:01.032000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:01.038000 audit[5928]: NETFILTER_CFG table=nat:142 family=2 entries=22 op=nft_register_rule pid=5928 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:01.038000 audit[5928]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7fff2e36f930 a2=0 a3=7fff2e36f91c items=0 ppid=2209 pid=5928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:01.038000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:03.633000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:03.633000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:03.633000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c009e445e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:11:03.633000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:03.633000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c009c5c5e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:11:03.633000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:03.671000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:03.671000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0074ae840 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:11:03.671000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:03.739000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:03.739000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0074ae930 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:11:03.739000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:03.954000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:03.954000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00e9c4750 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:11:03.954000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:03.954000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:03.954000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00e9c47b0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:11:03.954000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:16.988000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:17.599598 kernel: kauditd_printk_skb: 26 callbacks suppressed Jul 10 01:11:17.635096 kernel: audit: type=1400 audit(1752109876.988:1656): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:17.639128 kernel: audit: type=1300 audit(1752109876.988:1656): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000b73a80 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:17.643382 kernel: audit: type=1327 audit(1752109876.988:1656): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:17.643431 kernel: audit: type=1400 audit(1752109876.996:1657): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:17.647019 kernel: audit: type=1300 audit(1752109876.996:1657): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00256be60 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:17.651500 kernel: audit: type=1327 audit(1752109876.996:1657): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:16.988000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000b73a80 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:16.988000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:16.996000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:16.996000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00256be60 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:16.996000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:34.969000 audit[5958]: NETFILTER_CFG table=filter:143 family=2 entries=12 op=nft_register_rule pid=5958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:35.262918 kernel: audit: type=1325 audit(1752109894.969:1658): table=filter:143 family=2 entries=12 op=nft_register_rule pid=5958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:35.313450 kernel: audit: type=1300 audit(1752109894.969:1658): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe6d77f470 a2=0 a3=7ffe6d77f45c items=0 ppid=2209 pid=5958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:35.313524 kernel: audit: type=1327 audit(1752109894.969:1658): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:35.320938 kernel: audit: type=1325 audit(1752109895.005:1659): table=nat:144 family=2 entries=36 op=nft_register_rule pid=5958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:35.320996 kernel: audit: type=1300 audit(1752109895.005:1659): arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffe6d77f470 a2=0 a3=7ffe6d77f45c items=0 ppid=2209 pid=5958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:35.321026 kernel: audit: type=1327 audit(1752109895.005:1659): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:34.969000 audit[5958]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe6d77f470 a2=0 a3=7ffe6d77f45c items=0 ppid=2209 pid=5958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:34.969000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:35.005000 audit[5958]: NETFILTER_CFG table=nat:144 family=2 entries=36 op=nft_register_rule pid=5958 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:35.005000 audit[5958]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffe6d77f470 a2=0 a3=7ffe6d77f45c items=0 ppid=2209 pid=5958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:35.005000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:40.577000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:40.985808 kernel: audit: type=1400 audit(1752109900.577:1660): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:41.112740 kernel: audit: type=1400 audit(1752109900.577:1661): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:41.120695 kernel: audit: type=1300 audit(1752109900.577:1661): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0017eda20 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:41.120745 kernel: audit: type=1327 audit(1752109900.577:1661): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:41.123696 kernel: audit: type=1300 audit(1752109900.577:1660): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001a98d00 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:41.127797 kernel: audit: type=1327 audit(1752109900.577:1660): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:41.132387 kernel: audit: type=1400 audit(1752109900.599:1662): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:41.132431 kernel: audit: type=1300 audit(1752109900.599:1662): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c0017eda40 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:41.132459 kernel: audit: type=1327 audit(1752109900.599:1662): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:41.132481 kernel: audit: type=1400 audit(1752109900.671:1663): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:40.577000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:40.577000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0017eda20 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:40.577000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:40.577000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001a98d00 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:40.577000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:40.599000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:40.599000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c0017eda40 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:40.599000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:40.671000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:40.671000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001a98d40 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:11:40.671000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:42.033000 audit[5960]: NETFILTER_CFG table=filter:145 family=2 entries=12 op=nft_register_rule pid=5960 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:42.033000 audit[5960]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc7c452160 a2=0 a3=7ffc7c45214c items=0 ppid=2209 pid=5960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:42.033000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:42.064000 audit[5960]: NETFILTER_CFG table=nat:146 family=2 entries=34 op=nft_unregister_chain pid=5960 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:42.064000 audit[5960]: SYSCALL arch=c000003e syscall=46 success=yes exit=9476 a0=3 a1=7ffc7c452160 a2=0 a3=7ffc7c45214c items=0 ppid=2209 pid=5960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:42.064000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:45.073000 audit[5962]: NETFILTER_CFG table=filter:147 family=2 entries=15 op=nft_register_rule pid=5962 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:45.073000 audit[5962]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe3e8a9b90 a2=0 a3=7ffe3e8a9b7c items=0 ppid=2209 pid=5962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:45.073000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:45.097000 audit[5962]: NETFILTER_CFG table=nat:148 family=2 entries=37 op=nft_unregister_chain pid=5962 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:45.097000 audit[5962]: SYSCALL arch=c000003e syscall=46 success=yes exit=5004 a0=3 a1=7ffe3e8a9b90 a2=0 a3=7ffe3e8a9b7c items=0 ppid=2209 pid=5962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:45.097000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:46.175000 audit[4598]: AVC avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:11:46.789034 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 10 01:11:46.862241 kernel: audit: type=1400 audit(1752109906.175:1668): avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:11:46.878589 kernel: audit: type=1300 audit(1752109906.175:1668): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0026fa060 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:11:46.883551 kernel: audit: type=1327 audit(1752109906.175:1668): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:46.891782 kernel: audit: type=1400 audit(1752109906.268:1669): avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:11:46.891813 kernel: audit: type=1300 audit(1752109906.268:1669): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001a646e0 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:11:46.891831 kernel: audit: type=1327 audit(1752109906.268:1669): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:46.175000 audit[4598]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0026fa060 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:11:46.175000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:46.268000 audit[4561]: AVC avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:11:46.268000 audit[4561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001a646e0 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:11:46.268000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:47.609000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:11:47.727428 kernel: audit: type=1400 audit(1752109907.609:1670): avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:11:47.757140 kernel: audit: type=1300 audit(1752109907.609:1670): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c00e0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:11:47.759678 kernel: audit: type=1327 audit(1752109907.609:1670): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:47.609000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c00e0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:11:47.609000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:48.885000 audit[5965]: NETFILTER_CFG table=filter:149 family=2 entries=19 op=nft_register_rule pid=5965 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:49.066522 kernel: audit: type=1325 audit(1752109908.885:1671): table=filter:149 family=2 entries=19 op=nft_register_rule pid=5965 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:48.885000 audit[5965]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd12b0c3b0 a2=0 a3=7ffd12b0c39c items=0 ppid=2209 pid=5965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:48.885000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:11:48.890000 audit[5965]: NETFILTER_CFG table=nat:150 family=2 entries=21 op=nft_unregister_chain pid=5965 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:11:48.890000 audit[5965]: SYSCALL arch=c000003e syscall=46 success=yes exit=3724 a0=3 a1=7ffd12b0c3b0 a2=0 a3=0 items=0 ppid=2209 pid=5965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:11:48.890000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:12:03.774935 kernel: kauditd_printk_skb: 5 callbacks suppressed Jul 10 01:12:03.908248 kernel: audit: type=1400 audit(1752109923.758:1673): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:03.917833 kernel: audit: type=1300 audit(1752109923.758:1673): arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c006cae0e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:12:03.922340 kernel: audit: type=1327 audit(1752109923.758:1673): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:03.933212 kernel: audit: type=1400 audit(1752109923.770:1674): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:03.933259 kernel: audit: type=1300 audit(1752109923.770:1674): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00e1cfc80 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:12:03.936305 kernel: audit: type=1327 audit(1752109923.770:1674): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:03.939470 kernel: audit: type=1400 audit(1752109923.791:1675): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:03.943129 kernel: audit: type=1300 audit(1752109923.791:1675): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00bee5560 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:12:03.945918 kernel: audit: type=1327 audit(1752109923.791:1675): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:03.947621 kernel: audit: type=1400 audit(1752109923.806:1676): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:03.758000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:03.758000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c006cae0e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:12:03.758000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:03.770000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:03.770000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00e1cfc80 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:12:03.770000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:03.791000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:03.791000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00bee5560 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:12:03.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:03.806000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:03.806000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0084a16b0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:12:03.806000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:03.958000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:03.958000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0084a1c50 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:12:03.958000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:03.958000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:03.958000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0084a1cb0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:12:03.958000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:17.232000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:17.396277 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:12:17.405883 kernel: audit: type=1400 audit(1752109937.232:1679): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:17.406963 kernel: audit: type=1400 audit(1752109937.232:1680): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:17.407404 kernel: audit: type=1300 audit(1752109937.232:1680): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b4ca80 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:17.407432 kernel: audit: type=1327 audit(1752109937.232:1680): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:17.407452 kernel: audit: type=1300 audit(1752109937.232:1679): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00282c980 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:17.407468 kernel: audit: type=1327 audit(1752109937.232:1679): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:17.232000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:17.232000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b4ca80 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:17.232000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:17.232000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00282c980 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:17.232000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:41.214000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:41.475042 kernel: audit: type=1400 audit(1752109961.214:1681): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:41.488484 kernel: audit: type=1300 audit(1752109961.214:1681): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002908700 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:41.490135 kernel: audit: type=1327 audit(1752109961.214:1681): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:41.494813 kernel: audit: type=1400 audit(1752109961.229:1682): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:41.496340 kernel: audit: type=1300 audit(1752109961.229:1682): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002908720 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:41.496367 kernel: audit: type=1327 audit(1752109961.229:1682): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:41.496384 kernel: audit: type=1400 audit(1752109961.241:1683): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:41.496403 kernel: audit: type=1300 audit(1752109961.241:1683): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00282dea0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:41.498903 kernel: audit: type=1327 audit(1752109961.241:1683): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:41.498928 kernel: audit: type=1400 audit(1752109961.256:1684): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:41.214000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002908700 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:41.214000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:41.229000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:41.229000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002908720 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:41.229000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:41.241000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:41.241000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00282dea0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:41.241000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:41.256000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:41.256000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002908740 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:12:41.256000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:46.558349 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:12:47.029398 kernel: audit: type=1400 audit(1752109966.529:1685): avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:12:47.044208 kernel: audit: type=1300 audit(1752109966.529:1685): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001a65ca0 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:12:47.047931 kernel: audit: type=1327 audit(1752109966.529:1685): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:47.052153 kernel: audit: type=1400 audit(1752109966.582:1686): avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:12:47.052198 kernel: audit: type=1300 audit(1752109966.582:1686): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0026fa620 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:12:47.052223 kernel: audit: type=1327 audit(1752109966.582:1686): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:46.529000 audit[4561]: AVC avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:12:46.529000 audit[4561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001a65ca0 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:12:46.529000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:46.582000 audit[4598]: AVC avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:12:46.582000 audit[4598]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0026fa620 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:12:46.582000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:47.717000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:12:47.741095 kernel: audit: type=1400 audit(1752109967.717:1687): avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:12:47.752607 kernel: audit: type=1300 audit(1752109967.717:1687): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c10a0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:12:47.755495 kernel: audit: type=1327 audit(1752109967.717:1687): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:47.717000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c10a0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:12:47.717000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:03.851000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:04.061990 kernel: audit: type=1400 audit(1752109983.851:1688): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:04.084268 kernel: audit: type=1300 audit(1752109983.851:1688): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c01094f920 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:13:04.084321 kernel: audit: type=1327 audit(1752109983.851:1688): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:04.086269 kernel: audit: type=1400 audit(1752109983.851:1689): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:04.089710 kernel: audit: type=1300 audit(1752109983.851:1689): arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00d3835c0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:13:04.093694 kernel: audit: type=1327 audit(1752109983.851:1689): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:04.097292 kernel: audit: type=1400 audit(1752109983.860:1690): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:04.099872 kernel: audit: type=1300 audit(1752109983.860:1690): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00d383740 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:13:04.101940 kernel: audit: type=1327 audit(1752109983.860:1690): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:04.101965 kernel: audit: type=1400 audit(1752109983.875:1691): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:03.851000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c01094f920 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:13:03.851000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:03.851000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:03.851000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00d3835c0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:13:03.851000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:03.860000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:03.860000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00d383740 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:13:03.860000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:03.875000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:03.875000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c01094f980 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:13:03.875000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:03.959000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:03.959000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c006cd5590 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:13:03.959000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:03.959000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:03.959000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c006cd5650 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:13:03.959000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:17.451000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:18.274543 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:13:18.307005 kernel: audit: type=1400 audit(1752109997.451:1694): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:18.312052 kernel: audit: type=1300 audit(1752109997.451:1694): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002988e40 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:13:18.314166 kernel: audit: type=1327 audit(1752109997.451:1694): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:18.316086 kernel: audit: type=1400 audit(1752109997.466:1695): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:18.316130 kernel: audit: type=1300 audit(1752109997.466:1695): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021c4120 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:13:18.316164 kernel: audit: type=1327 audit(1752109997.466:1695): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:17.451000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002988e40 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:13:17.451000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:17.466000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:17.466000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0021c4120 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:13:17.466000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:24.270030 systemd[1]: cri-containerd-e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5.scope: Deactivated successfully. Jul 10 01:13:25.017878 kernel: audit: type=1334 audit(1752110004.291:1696): prog-id=242 op=UNLOAD Jul 10 01:13:25.083070 kernel: audit: type=1334 audit(1752110004.294:1697): prog-id=245 op=UNLOAD Jul 10 01:13:24.291000 audit: BPF prog-id=242 op=UNLOAD Jul 10 01:13:24.294000 audit: BPF prog-id=245 op=UNLOAD Jul 10 01:13:25.344174 env[1246]: time="2025-07-10T01:13:24.541076438Z" level=info msg="shim disconnected" id=e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5 Jul 10 01:13:25.344174 env[1246]: time="2025-07-10T01:13:24.541124027Z" level=warning msg="cleaning up after shim disconnected" id=e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5 namespace=k8s.io Jul 10 01:13:25.344174 env[1246]: time="2025-07-10T01:13:24.541135636Z" level=info msg="cleaning up dead shim" Jul 10 01:13:25.344174 env[1246]: time="2025-07-10T01:13:24.546874003Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:13:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6019 runtime=io.containerd.runc.v2\n" Jul 10 01:13:24.302772 systemd[1]: cri-containerd-e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5.scope: Consumed 5.563s CPU time. Jul 10 01:13:24.648200 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5-rootfs.mount: Deactivated successfully. Jul 10 01:13:33.849740 sshd[5884]: pam_unix(sshd:session): session closed for user core Jul 10 01:13:33.973573 kernel: audit: type=1106 audit(1752110013.903:1698): pid=5884 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:33.990643 kernel: audit: type=1104 audit(1752110013.908:1699): pid=5884 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:33.992921 kernel: audit: type=1131 audit(1752110013.929:1700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.108:22-139.178.68.195:49746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:33.903000 audit[5884]: USER_END pid=5884 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:33.908000 audit[5884]: CRED_DISP pid=5884 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:33.929000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.108:22-139.178.68.195:49746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:33.921850 systemd[1]: sshd@11-139.178.70.108:22-139.178.68.195:49746.service: Deactivated successfully. Jul 10 01:13:33.936576 systemd[1]: session-13.scope: Deactivated successfully. Jul 10 01:13:33.936672 systemd[1]: session-13.scope: Consumed 14.021s CPU time. Jul 10 01:13:33.942277 systemd-logind[1238]: Session 13 logged out. Waiting for processes to exit. Jul 10 01:13:33.973407 systemd-logind[1238]: Removed session 13. Jul 10 01:13:34.153740 kubelet[2106]: E0710 01:13:34.153659 2106 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc" cmd=["/health","-ready"] Jul 10 01:13:34.482074 kubelet[2106]: E0710 01:13:34.481996 2106 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde" cmd=["/usr/bin/check-status","-r"] Jul 10 01:13:34.482287 kubelet[2106]: E0710 01:13:34.098497 2106 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="3b710d5115631c01c0bb6a1f8e81b1960ad3db7e6b2e11f87fe772194a7d57b0" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Jul 10 01:13:34.490294 kubelet[2106]: E0710 01:11:01.049375 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.164s" Jul 10 01:13:35.026787 kubelet[2106]: W0710 01:13:35.026752 2106 reflector.go:484] object-"calico-system"/"whisker-backend-key-pair": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.039709 kubelet[2106]: W0710 01:13:35.039687 2106 reflector.go:484] object-"tigera-operator"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.039846 kubelet[2106]: W0710 01:13:35.039836 2106 reflector.go:484] object-"kube-system"/"coredns": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.039937 kubelet[2106]: W0710 01:13:35.039928 2106 reflector.go:484] object-"calico-system"/"whisker-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.040004 kubelet[2106]: W0710 01:13:35.039996 2106 reflector.go:484] object-"calico-system"/"goldmane": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.040067 kubelet[2106]: W0710 01:13:35.040058 2106 reflector.go:484] object-"calico-system"/"typha-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.040129 kubelet[2106]: W0710 01:13:35.040120 2106 reflector.go:484] object-"kube-system"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.040212 kubelet[2106]: W0710 01:13:35.040204 2106 reflector.go:484] object-"calico-system"/"node-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.040276 kubelet[2106]: W0710 01:13:35.040268 2106 reflector.go:484] object-"calico-system"/"goldmane-key-pair": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.040342 kubelet[2106]: W0710 01:13:35.040334 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.Service ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.040412 kubelet[2106]: W0710 01:13:35.040404 2106 reflector.go:484] object-"calico-apiserver"/"calico-apiserver-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.040474 kubelet[2106]: W0710 01:13:35.040466 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.CSIDriver ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.040536 kubelet[2106]: W0710 01:13:35.040528 2106 reflector.go:484] object-"calico-system"/"tigera-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.040614 kubelet[2106]: W0710 01:13:35.040606 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.RuntimeClass ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.046517 kubelet[2106]: W0710 01:13:35.040696 2106 reflector.go:484] object-"tigera-operator"/"kubernetes-services-endpoint": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.046517 kubelet[2106]: W0710 01:13:35.040710 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.Node ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.197740 kubelet[2106]: W0710 01:13:35.197705 2106 reflector.go:484] object-"calico-system"/"goldmane-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.219459 env[1246]: time="2025-07-10T01:13:35.219327301Z" level=info msg="RemovePodSandbox for \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\"" Jul 10 01:13:35.219459 env[1246]: time="2025-07-10T01:13:35.219359679Z" level=info msg="Forcibly stopping sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\"" Jul 10 01:13:35.241907 kubelet[2106]: W0710 01:13:35.241876 2106 reflector.go:484] object-"calico-apiserver"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.291610 kubelet[2106]: W0710 01:13:35.291533 2106 reflector.go:484] pkg/kubelet/config/apiserver.go:66: watch of *v1.Pod ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.311829 kubelet[2106]: W0710 01:13:35.311796 2106 reflector.go:484] object-"kube-system"/"kube-proxy": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.311963 kubelet[2106]: W0710 01:13:35.008286 2106 reflector.go:484] object-"calico-system"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:13:35.441688 kubelet[2106]: E0710 01:13:35.441632 2106 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 3m24.814047461s ago; threshold is 3m0s]" Jul 10 01:13:35.568305 kubelet[2106]: E0710 01:13:35.568243 2106 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 3m25.8773713s ago; threshold is 3m0s" Jul 10 01:13:35.834805 systemd[1]: run-containerd-runc-k8s.io-46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde-runc.Oqp7th.mount: Deactivated successfully. Jul 10 01:13:39.207382 systemd[1]: Started sshd@12-139.178.70.108:22-139.178.68.195:47690.service. Jul 10 01:13:39.414544 kernel: audit: type=1130 audit(1752110019.218:1701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.108:22-139.178.68.195:47690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:39.218000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.108:22-139.178.68.195:47690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:40.171000 audit[6162]: USER_ACCT pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:40.275239 kernel: audit: type=1101 audit(1752110020.171:1702): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:40.291232 kernel: audit: type=1103 audit(1752110020.189:1703): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:40.298805 kernel: audit: type=1006 audit(1752110020.189:1704): pid=6162 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 10 01:13:40.309315 kernel: audit: type=1300 audit(1752110020.189:1704): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc83a325b0 a2=3 a3=0 items=0 ppid=1 pid=6162 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:40.309368 kernel: audit: type=1327 audit(1752110020.189:1704): proctitle=737368643A20636F7265205B707269765D Jul 10 01:13:40.189000 audit[6162]: CRED_ACQ pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:40.189000 audit[6162]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc83a325b0 a2=3 a3=0 items=0 ppid=1 pid=6162 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:40.189000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:13:40.393705 sshd[6162]: Accepted publickey for core from 139.178.68.195 port 47690 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:13:40.210510 sshd[6162]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:13:40.545779 systemd-logind[1238]: New session 14 of user core. Jul 10 01:13:40.565496 systemd[1]: Started session-14.scope. Jul 10 01:13:40.609000 audit[6162]: USER_START pid=6162 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:40.615205 kernel: audit: type=1105 audit(1752110020.609:1705): pid=6162 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:40.647000 audit[6164]: CRED_ACQ pid=6164 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:40.652237 kernel: audit: type=1103 audit(1752110020.647:1706): pid=6164 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:41.470000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:41.604135 kernel: audit: type=1400 audit(1752110021.470:1707): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:41.624504 kernel: audit: type=1300 audit(1752110021.470:1707): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002105340 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:13:41.470000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002105340 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:13:41.470000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:41.499000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:41.499000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002105360 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:13:41.499000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:41.535000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:41.535000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002105380 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:13:41.535000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:41.536000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:41.536000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000a629a0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:13:41.536000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:38.418 [WARNING][6056] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0", GenerateName:"calico-apiserver-6999bb78bb-", Namespace:"calico-apiserver", SelfLink:"", UID:"f3bf9bd5-e212-4aae-b3c5-d97b01ec7b79", ResourceVersion:"1819", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 6, 8, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6999bb78bb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1f668b93b03c70a5637b84660c37497763d88e80957e78c0247a52c83ce3c717", Pod:"calico-apiserver-6999bb78bb-w7jtd", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali00edc62a2de", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:38.517 [INFO][6056] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:38.541 [INFO][6056] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" iface="eth0" netns="" Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:38.541 [INFO][6056] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:38.556 [INFO][6056] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:41.544 [INFO][6157] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" HandleID="k8s-pod-network.a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:41.600 [INFO][6157] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:41.610 [INFO][6157] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:41.956 [WARNING][6157] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" HandleID="k8s-pod-network.a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:41.956 [INFO][6157] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" HandleID="k8s-pod-network.a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Workload="localhost-k8s-calico--apiserver--6999bb78bb--w7jtd-eth0" Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:41.957 [INFO][6157] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:13:42.029979 env[1246]: 2025-07-10 01:13:42.003 [INFO][6056] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd" Jul 10 01:13:42.109654 env[1246]: time="2025-07-10T01:13:42.034687743Z" level=info msg="TearDown network for sandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\" successfully" Jul 10 01:13:42.109654 env[1246]: time="2025-07-10T01:13:42.068083097Z" level=info msg="RemovePodSandbox \"a61309e781a05e4aa11705f0164f903327bb0ab5e55137f98cc0c455c00df8fd\" returns successfully" Jul 10 01:13:45.698449 sshd[6162]: pam_unix(sshd:session): session closed for user core Jul 10 01:13:45.806945 kernel: kauditd_printk_skb: 10 callbacks suppressed Jul 10 01:13:45.842695 kernel: audit: type=1106 audit(1752110025.743:1711): pid=6162 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:45.857928 kernel: audit: type=1104 audit(1752110025.749:1712): pid=6162 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:45.857989 kernel: audit: type=1131 audit(1752110025.799:1713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.108:22-139.178.68.195:47690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:45.743000 audit[6162]: USER_END pid=6162 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:45.749000 audit[6162]: CRED_DISP pid=6162 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:45.799000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.108:22-139.178.68.195:47690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:45.798159 systemd[1]: sshd@12-139.178.70.108:22-139.178.68.195:47690.service: Deactivated successfully. Jul 10 01:13:45.804676 systemd[1]: session-14.scope: Deactivated successfully. Jul 10 01:13:45.807871 systemd-logind[1238]: Session 14 logged out. Waiting for processes to exit. Jul 10 01:13:45.808553 systemd-logind[1238]: Removed session 14. Jul 10 01:13:46.736000 audit[4598]: AVC avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:13:46.817947 kernel: audit: type=1400 audit(1752110026.736:1714): avc: denied { watch } for pid=4598 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.2473209505/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c693,c782 tclass=file permissive=0 Jul 10 01:13:46.825980 kernel: audit: type=1300 audit(1752110026.736:1714): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001d59740 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:13:46.826074 kernel: audit: type=1327 audit(1752110026.736:1714): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:46.826100 kernel: audit: type=1400 audit(1752110026.766:1715): avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:13:46.826130 kernel: audit: type=1300 audit(1752110026.766:1715): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001b7ab60 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:13:46.829319 kernel: audit: type=1327 audit(1752110026.766:1715): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:46.736000 audit[4598]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001d59740 a2=fc6 a3=0 items=0 ppid=3855 pid=4598 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c693,c782 key=(null) Jul 10 01:13:46.736000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:46.766000 audit[4561]: AVC avc: denied { watch } for pid=4561 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1895446038/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c338,c714 tclass=file permissive=0 Jul 10 01:13:46.766000 audit[4561]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001b7ab60 a2=fc6 a3=0 items=0 ppid=3805 pid=4561 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c338,c714 key=(null) Jul 10 01:13:46.766000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:46.931000 audit[6179]: NETFILTER_CFG table=filter:151 family=2 entries=17 op=nft_register_rule pid=6179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:13:46.940213 kernel: audit: type=1325 audit(1752110026.931:1716): table=filter:151 family=2 entries=17 op=nft_register_rule pid=6179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:13:46.931000 audit[6179]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffe0bcecb0 a2=0 a3=7fffe0bcec9c items=0 ppid=2209 pid=6179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:46.931000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:13:46.939000 audit[6179]: NETFILTER_CFG table=nat:152 family=2 entries=35 op=nft_register_chain pid=6179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:13:46.939000 audit[6179]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7fffe0bcecb0 a2=0 a3=7fffe0bcec9c items=0 ppid=2209 pid=6179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:46.939000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:13:47.732000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:13:47.732000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0000573c0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:13:47.732000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:49.090949 systemd[1]: run-containerd-runc-k8s.io-46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde-runc.POwLwm.mount: Deactivated successfully. Jul 10 01:13:50.798040 kubelet[2106]: E0710 01:13:50.287372 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="13.796s" Jul 10 01:13:51.007521 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:13:51.038719 kernel: audit: type=1130 audit(1752110030.808:1719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.108:22-139.178.68.195:47488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:50.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.108:22-139.178.68.195:47488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:50.800147 systemd[1]: Started sshd@13-139.178.70.108:22-139.178.68.195:47488.service. Jul 10 01:13:52.047000 audit[6245]: USER_ACCT pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:52.072918 kernel: audit: type=1101 audit(1752110032.047:1720): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:52.085839 kernel: audit: type=1103 audit(1752110032.053:1721): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:52.091850 kernel: audit: type=1006 audit(1752110032.053:1722): pid=6245 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 10 01:13:52.091883 kernel: audit: type=1300 audit(1752110032.053:1722): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc91f04e50 a2=3 a3=0 items=0 ppid=1 pid=6245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:52.093174 kernel: audit: type=1327 audit(1752110032.053:1722): proctitle=737368643A20636F7265205B707269765D Jul 10 01:13:52.053000 audit[6245]: CRED_ACQ pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:52.053000 audit[6245]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc91f04e50 a2=3 a3=0 items=0 ppid=1 pid=6245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:52.053000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:13:52.153432 sshd[6245]: Accepted publickey for core from 139.178.68.195 port 47488 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:13:52.085941 sshd[6245]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:13:52.387380 systemd-logind[1238]: New session 15 of user core. Jul 10 01:13:52.389889 systemd[1]: Started session-15.scope. Jul 10 01:13:52.398000 audit[6245]: USER_START pid=6245 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:52.405025 kernel: audit: type=1105 audit(1752110032.398:1723): pid=6245 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:52.409262 kernel: audit: type=1103 audit(1752110032.404:1724): pid=6247 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:52.404000 audit[6247]: CRED_ACQ pid=6247 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:52.985496 kernel: audit: type=1325 audit(1752110032.978:1725): table=filter:153 family=2 entries=14 op=nft_register_rule pid=6253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:13:53.004024 kernel: audit: type=1300 audit(1752110032.978:1725): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd54a6f8d0 a2=0 a3=7ffd54a6f8bc items=0 ppid=2209 pid=6253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:52.978000 audit[6253]: NETFILTER_CFG table=filter:153 family=2 entries=14 op=nft_register_rule pid=6253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:13:52.978000 audit[6253]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd54a6f8d0 a2=0 a3=7ffd54a6f8bc items=0 ppid=2209 pid=6253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:52.978000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:13:52.989000 audit[6253]: NETFILTER_CFG table=nat:154 family=2 entries=28 op=nft_register_rule pid=6253 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:13:52.989000 audit[6253]: SYSCALL arch=c000003e syscall=46 success=yes exit=8580 a0=3 a1=7ffd54a6f8d0 a2=0 a3=7ffd54a6f8bc items=0 ppid=2209 pid=6253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:52.989000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:03.886000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:04.369792 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 10 01:14:04.419684 kernel: audit: type=1400 audit(1752110043.886:1727): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:04.429653 kernel: audit: type=1300 audit(1752110043.886:1727): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004fc3680 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:14:04.444980 kernel: audit: type=1327 audit(1752110043.886:1727): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:04.450148 kernel: audit: type=1400 audit(1752110043.908:1728): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:04.450223 kernel: audit: type=1300 audit(1752110043.908:1728): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00408e7e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:14:04.456053 kernel: audit: type=1327 audit(1752110043.908:1728): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:04.456097 kernel: audit: type=1400 audit(1752110043.929:1729): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:04.456115 kernel: audit: type=1300 audit(1752110043.929:1729): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004fc36e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:14:04.456141 kernel: audit: type=1327 audit(1752110043.929:1729): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:04.462325 kernel: audit: type=1400 audit(1752110043.993:1730): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:03.886000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004fc3680 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:14:03.886000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:03.908000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:03.908000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00408e7e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:14:03.908000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:03.929000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:03.929000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c004fc36e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:14:03.929000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:03.993000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:03.993000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c01393fd10 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:14:03.993000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:04.051000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:04.051000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c01393fd40 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:14:04.051000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:04.051000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:04.051000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c01393fda0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:14:04.051000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:04.764558 env[1246]: time="2025-07-10T01:14:04.529623821Z" level=error msg="ExecSync for \"8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Jul 10 01:14:10.500255 sshd[6245]: pam_unix(sshd:session): session closed for user core Jul 10 01:14:10.705575 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:14:10.721898 kernel: audit: type=1106 audit(1752110050.592:1733): pid=6245 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:10.732711 kernel: audit: type=1104 audit(1752110050.597:1734): pid=6245 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:10.732776 kernel: audit: type=1131 audit(1752110050.613:1735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.108:22-139.178.68.195:47488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:10.592000 audit[6245]: USER_END pid=6245 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:10.597000 audit[6245]: CRED_DISP pid=6245 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:10.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.108:22-139.178.68.195:47488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:10.603259 systemd[1]: sshd@13-139.178.70.108:22-139.178.68.195:47488.service: Deactivated successfully. Jul 10 01:14:10.619214 systemd[1]: session-15.scope: Deactivated successfully. Jul 10 01:14:10.619356 systemd[1]: session-15.scope: Consumed 2.093s CPU time. Jul 10 01:14:10.623905 systemd-logind[1238]: Session 15 logged out. Waiting for processes to exit. Jul 10 01:14:10.650114 systemd-logind[1238]: Removed session 15. Jul 10 01:14:11.230044 kubelet[2106]: E0710 01:14:10.945934 2106 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc" cmd=["/health","-ready"] Jul 10 01:14:11.250678 kubelet[2106]: I0710 01:14:11.250662 2106 scope.go:117] "RemoveContainer" containerID="e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5" Jul 10 01:14:12.206779 kubelet[2106]: E0710 01:14:12.206747 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="13.068s" Jul 10 01:14:12.415770 kubelet[2106]: I0710 01:14:12.415738 2106 scope.go:117] "RemoveContainer" containerID="b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359" Jul 10 01:14:13.330000 audit[6324]: NETFILTER_CFG table=filter:155 family=2 entries=13 op=nft_register_rule pid=6324 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:13.420518 kernel: audit: type=1325 audit(1752110053.330:1736): table=filter:155 family=2 entries=13 op=nft_register_rule pid=6324 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:13.430123 kernel: audit: type=1300 audit(1752110053.330:1736): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff9d6d1450 a2=0 a3=7fff9d6d143c items=0 ppid=2209 pid=6324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:13.430210 kernel: audit: type=1327 audit(1752110053.330:1736): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:13.430235 kernel: audit: type=1325 audit(1752110053.345:1737): table=nat:156 family=2 entries=27 op=nft_register_chain pid=6324 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:13.432217 kernel: audit: type=1300 audit(1752110053.345:1737): arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fff9d6d1450 a2=0 a3=7fff9d6d143c items=0 ppid=2209 pid=6324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:13.432250 kernel: audit: type=1327 audit(1752110053.345:1737): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:13.330000 audit[6324]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff9d6d1450 a2=0 a3=7fff9d6d143c items=0 ppid=2209 pid=6324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:13.330000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:13.345000 audit[6324]: NETFILTER_CFG table=nat:156 family=2 entries=27 op=nft_register_chain pid=6324 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:13.345000 audit[6324]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fff9d6d1450 a2=0 a3=7fff9d6d143c items=0 ppid=2209 pid=6324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:13.345000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:13.779000 audit[6326]: NETFILTER_CFG table=filter:157 family=2 entries=12 op=nft_register_rule pid=6326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:13.787766 kernel: audit: type=1325 audit(1752110053.779:1738): table=filter:157 family=2 entries=12 op=nft_register_rule pid=6326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:13.779000 audit[6326]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffb4c6f840 a2=0 a3=7fffb4c6f82c items=0 ppid=2209 pid=6326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:13.779000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:13.810000 audit[6326]: NETFILTER_CFG table=nat:158 family=2 entries=58 op=nft_register_chain pid=6326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:13.810000 audit[6326]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7fffb4c6f840 a2=0 a3=7fffb4c6f82c items=0 ppid=2209 pid=6326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:13.810000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:13.944367 env[1246]: time="2025-07-10T01:14:13.944238634Z" level=info msg="CreateContainer within sandbox \"ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79\" for container &ContainerMetadata{Name:tigera-operator,Attempt:2,}" Jul 10 01:14:14.107257 env[1246]: time="2025-07-10T01:14:14.106939637Z" level=info msg="RemoveContainer for \"b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359\"" Jul 10 01:14:14.109006 env[1246]: time="2025-07-10T01:14:14.108982403Z" level=info msg="StopContainer for \"00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06\" with timeout 30 (s)" Jul 10 01:14:14.121398 env[1246]: time="2025-07-10T01:14:14.121365042Z" level=info msg="CreateContainer within sandbox \"ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79\" for &ContainerMetadata{Name:tigera-operator,Attempt:2,} returns container id \"b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866\"" Jul 10 01:14:14.123238 env[1246]: time="2025-07-10T01:14:14.121503182Z" level=info msg="StopContainer for \"754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a\" with timeout 30 (s)" Jul 10 01:14:14.123238 env[1246]: time="2025-07-10T01:14:14.121582899Z" level=info msg="Stop container \"00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06\" with signal terminated" Jul 10 01:14:14.124529 env[1246]: time="2025-07-10T01:14:14.124407312Z" level=info msg="RemoveContainer for \"b6f29da4c1193c93b4b8f3ecbf2b8f26b5c37f0f31754b51d03a660b7be51359\" returns successfully" Jul 10 01:14:14.129620 env[1246]: time="2025-07-10T01:14:14.129147457Z" level=info msg="Stop container \"754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a\" with signal terminated" Jul 10 01:14:14.164000 audit: BPF prog-id=212 op=UNLOAD Jul 10 01:14:14.166000 audit: BPF prog-id=216 op=UNLOAD Jul 10 01:14:14.168000 audit: BPF prog-id=215 op=UNLOAD Jul 10 01:14:14.168000 audit: BPF prog-id=219 op=UNLOAD Jul 10 01:14:14.165468 systemd[1]: cri-containerd-754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a.scope: Deactivated successfully. Jul 10 01:14:14.165680 systemd[1]: cri-containerd-754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a.scope: Consumed 1.194s CPU time. Jul 10 01:14:14.167701 systemd[1]: cri-containerd-00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06.scope: Deactivated successfully. Jul 10 01:14:14.167942 systemd[1]: cri-containerd-00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06.scope: Consumed 2.074s CPU time. Jul 10 01:14:14.192085 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06-rootfs.mount: Deactivated successfully. Jul 10 01:14:14.195472 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a-rootfs.mount: Deactivated successfully. Jul 10 01:14:14.197863 env[1246]: time="2025-07-10T01:14:14.197571343Z" level=info msg="shim disconnected" id=00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06 Jul 10 01:14:14.197968 env[1246]: time="2025-07-10T01:14:14.197956135Z" level=warning msg="cleaning up after shim disconnected" id=00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06 namespace=k8s.io Jul 10 01:14:14.198074 env[1246]: time="2025-07-10T01:14:14.198063218Z" level=info msg="cleaning up dead shim" Jul 10 01:14:14.198999 env[1246]: time="2025-07-10T01:14:14.198963062Z" level=info msg="shim disconnected" id=754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a Jul 10 01:14:14.199099 env[1246]: time="2025-07-10T01:14:14.199000817Z" level=warning msg="cleaning up after shim disconnected" id=754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a namespace=k8s.io Jul 10 01:14:14.199099 env[1246]: time="2025-07-10T01:14:14.199017975Z" level=info msg="cleaning up dead shim" Jul 10 01:14:14.206277 env[1246]: time="2025-07-10T01:14:14.206246157Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:14:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6364 runtime=io.containerd.runc.v2\n" Jul 10 01:14:14.208032 env[1246]: time="2025-07-10T01:14:14.207976207Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:14:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6363 runtime=io.containerd.runc.v2\n" Jul 10 01:14:14.229025 env[1246]: time="2025-07-10T01:14:14.228996749Z" level=info msg="StopContainer for \"754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a\" returns successfully" Jul 10 01:14:14.230564 env[1246]: time="2025-07-10T01:14:14.230547838Z" level=info msg="StopContainer for \"00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06\" returns successfully" Jul 10 01:14:14.466819 env[1246]: time="2025-07-10T01:14:14.466756508Z" level=info msg="StartContainer for \"b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866\"" Jul 10 01:14:14.467456 env[1246]: time="2025-07-10T01:14:14.466573537Z" level=info msg="StopPodSandbox for \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\"" Jul 10 01:14:14.467456 env[1246]: time="2025-07-10T01:14:14.467391341Z" level=info msg="Container to stop \"00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 10 01:14:14.467679 env[1246]: time="2025-07-10T01:14:14.467600450Z" level=info msg="StopPodSandbox for \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\"" Jul 10 01:14:14.467679 env[1246]: time="2025-07-10T01:14:14.467635421Z" level=info msg="Container to stop \"754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 10 01:14:14.469699 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5-shm.mount: Deactivated successfully. Jul 10 01:14:14.469764 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7-shm.mount: Deactivated successfully. Jul 10 01:14:14.489000 audit: BPF prog-id=172 op=UNLOAD Jul 10 01:14:14.492000 audit: BPF prog-id=175 op=UNLOAD Jul 10 01:14:14.490266 systemd[1]: cri-containerd-24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5.scope: Deactivated successfully. Jul 10 01:14:14.498000 audit: BPF prog-id=168 op=UNLOAD Jul 10 01:14:14.500000 audit: BPF prog-id=171 op=UNLOAD Jul 10 01:14:14.499902 systemd[1]: cri-containerd-8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7.scope: Deactivated successfully. Jul 10 01:14:14.520857 systemd[1]: Started cri-containerd-b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866.scope. Jul 10 01:14:14.525774 env[1246]: time="2025-07-10T01:14:14.525696097Z" level=info msg="shim disconnected" id=24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5 Jul 10 01:14:14.525774 env[1246]: time="2025-07-10T01:14:14.525727104Z" level=warning msg="cleaning up after shim disconnected" id=24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5 namespace=k8s.io Jul 10 01:14:14.525774 env[1246]: time="2025-07-10T01:14:14.525732740Z" level=info msg="cleaning up dead shim" Jul 10 01:14:14.530009 env[1246]: time="2025-07-10T01:14:14.529940089Z" level=info msg="shim disconnected" id=8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7 Jul 10 01:14:14.530009 env[1246]: time="2025-07-10T01:14:14.529966998Z" level=warning msg="cleaning up after shim disconnected" id=8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7 namespace=k8s.io Jul 10 01:14:14.530009 env[1246]: time="2025-07-10T01:14:14.529972899Z" level=info msg="cleaning up dead shim" Jul 10 01:14:14.536932 env[1246]: time="2025-07-10T01:14:14.536893233Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:14:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6447 runtime=io.containerd.runc.v2\n" Jul 10 01:14:14.541644 env[1246]: time="2025-07-10T01:14:14.539540456Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:14:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6457 runtime=io.containerd.runc.v2\ntime=\"2025-07-10T01:14:14Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Jul 10 01:14:14.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit: BPF prog-id=254 op=LOAD Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2230 pid=6409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:14.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236323037636334306665393561393739656330376162653831613434 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2230 pid=6409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:14.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236323037636334306665393561393739656330376162653831613434 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit: BPF prog-id=255 op=LOAD Jul 10 01:14:14.561000 audit[6409]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003964b0 items=0 ppid=2230 pid=6409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:14.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236323037636334306665393561393739656330376162653831613434 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit: BPF prog-id=256 op=LOAD Jul 10 01:14:14.561000 audit[6409]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003964f8 items=0 ppid=2230 pid=6409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:14.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236323037636334306665393561393739656330376162653831613434 Jul 10 01:14:14.561000 audit: BPF prog-id=256 op=UNLOAD Jul 10 01:14:14.561000 audit: BPF prog-id=255 op=UNLOAD Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { perfmon } for pid=6409 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit[6409]: AVC avc: denied { bpf } for pid=6409 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:14:14.561000 audit: BPF prog-id=257 op=LOAD Jul 10 01:14:14.561000 audit[6409]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000396908 items=0 ppid=2230 pid=6409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:14.561000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236323037636334306665393561393739656330376162653831613434 Jul 10 01:14:14.603332 env[1246]: time="2025-07-10T01:14:14.584754416Z" level=info msg="StartContainer for \"b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866\" returns successfully" Jul 10 01:14:14.714520 kubelet[2106]: E0710 01:14:14.714068 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.534s" Jul 10 01:14:14.944000 audit[6518]: NETFILTER_CFG table=filter:159 family=2 entries=11 op=nft_register_rule pid=6518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:14.944000 audit[6518]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc68a93280 a2=0 a3=7ffc68a9326c items=0 ppid=2209 pid=6518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:14.944000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:14.949000 audit[6518]: NETFILTER_CFG table=nat:160 family=2 entries=29 op=nft_register_chain pid=6518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:14.949000 audit[6518]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffc68a93280 a2=0 a3=7ffc68a9326c items=0 ppid=2209 pid=6518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:14.949000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:15.098684 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5-rootfs.mount: Deactivated successfully. Jul 10 01:14:15.098752 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7-rootfs.mount: Deactivated successfully. Jul 10 01:14:15.474221 systemd[1]: Started sshd@14-139.178.70.108:22-139.178.68.195:45116.service. Jul 10 01:14:15.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.108:22-139.178.68.195:45116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:15.837890 kubelet[2106]: I0710 01:14:15.837859 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:14:15.838235 kubelet[2106]: I0710 01:14:15.837908 2106 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:14:16.018000 audit[6527]: NETFILTER_CFG table=filter:161 family=2 entries=9 op=nft_register_rule pid=6527 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:16.034822 kernel: kauditd_printk_skb: 77 callbacks suppressed Jul 10 01:14:16.056684 kernel: audit: type=1325 audit(1752110056.018:1769): table=filter:161 family=2 entries=9 op=nft_register_rule pid=6527 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:16.079226 kernel: audit: type=1300 audit(1752110056.018:1769): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff923a8420 a2=0 a3=7fff923a840c items=0 ppid=2209 pid=6527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:16.085200 kernel: audit: type=1327 audit(1752110056.018:1769): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:16.089511 kernel: audit: type=1325 audit(1752110056.026:1770): table=nat:162 family=2 entries=43 op=nft_register_chain pid=6527 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:16.089565 kernel: audit: type=1300 audit(1752110056.026:1770): arch=c000003e syscall=46 success=yes exit=15580 a0=3 a1=7fff923a8420 a2=0 a3=7fff923a840c items=0 ppid=2209 pid=6527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:16.089587 kernel: audit: type=1327 audit(1752110056.026:1770): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:16.089607 kernel: audit: type=1101 audit(1752110056.060:1771): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:16.089625 kernel: audit: type=1103 audit(1752110056.064:1772): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:16.092545 kernel: audit: type=1006 audit(1752110056.064:1773): pid=6521 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 10 01:14:16.092580 kernel: audit: type=1300 audit(1752110056.064:1773): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe885d5520 a2=3 a3=0 items=0 ppid=1 pid=6521 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:16.018000 audit[6527]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff923a8420 a2=0 a3=7fff923a840c items=0 ppid=2209 pid=6527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:16.018000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:16.026000 audit[6527]: NETFILTER_CFG table=nat:162 family=2 entries=43 op=nft_register_chain pid=6527 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:16.026000 audit[6527]: SYSCALL arch=c000003e syscall=46 success=yes exit=15580 a0=3 a1=7fff923a8420 a2=0 a3=7fff923a840c items=0 ppid=2209 pid=6527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:16.026000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:16.060000 audit[6521]: USER_ACCT pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:16.064000 audit[6521]: CRED_ACQ pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:16.064000 audit[6521]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe885d5520 a2=3 a3=0 items=0 ppid=1 pid=6521 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:16.064000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:14:16.151320 sshd[6521]: Accepted publickey for core from 139.178.68.195 port 45116 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:14:16.086225 sshd[6521]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:14:16.210489 systemd[1]: Started session-16.scope. Jul 10 01:14:16.210925 systemd-logind[1238]: New session 16 of user core. Jul 10 01:14:16.218000 audit[6521]: USER_START pid=6521 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:16.219000 audit[6528]: CRED_ACQ pid=6528 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:16.421522 systemd-networkd[1063]: cali63e8892b9d8: Link DOWN Jul 10 01:14:16.421530 systemd-networkd[1063]: cali63e8892b9d8: Lost carrier Jul 10 01:14:16.437084 systemd-networkd[1063]: cali3bc7a0258af: Link DOWN Jul 10 01:14:16.437087 systemd-networkd[1063]: cali3bc7a0258af: Lost carrier Jul 10 01:14:17.398000 audit[6557]: NETFILTER_CFG table=filter:163 family=2 entries=90 op=nft_register_rule pid=6557 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:14:17.398000 audit[6557]: SYSCALL arch=c000003e syscall=46 success=yes exit=10388 a0=3 a1=7ffe293412d0 a2=0 a3=7ffe293412bc items=0 ppid=3488 pid=6557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:17.398000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:14:17.399000 audit[6557]: NETFILTER_CFG table=filter:164 family=2 entries=6 op=nft_unregister_chain pid=6557 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:14:17.399000 audit[6557]: SYSCALL arch=c000003e syscall=46 success=yes exit=816 a0=3 a1=7ffe293412d0 a2=0 a3=55a534272000 items=0 ppid=3488 pid=6557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:17.399000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:14:17.659000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:17.659000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b73c60 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:14:17.659000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:17.660000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:17.660000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00252fc80 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:14:17.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.296 [INFO][6505] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.321 [INFO][6505] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" iface="eth0" netns="/var/run/netns/cni-820e8912-e4c7-566d-394c-7d07fa4eefb7" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.338 [INFO][6505] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" iface="eth0" netns="/var/run/netns/cni-820e8912-e4c7-566d-394c-7d07fa4eefb7" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.367 [INFO][6505] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" after=39.236043ms iface="eth0" netns="/var/run/netns/cni-820e8912-e4c7-566d-394c-7d07fa4eefb7" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.367 [INFO][6505] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.367 [INFO][6505] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:17.752 [INFO][6535] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:17.768 [INFO][6535] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:18.216 [INFO][6535] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:18.278 [INFO][6535] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:18.278 [INFO][6535] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:18.280 [INFO][6535] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:18.306 [INFO][6505] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.278 [INFO][6504] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.321 [INFO][6504] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" iface="eth0" netns="/var/run/netns/cni-06fcddf2-b4e3-c67a-3418-7fcab0a98fc8" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.338 [INFO][6504] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" iface="eth0" netns="/var/run/netns/cni-06fcddf2-b4e3-c67a-3418-7fcab0a98fc8" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.363 [INFO][6504] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" after=35.315375ms iface="eth0" netns="/var/run/netns/cni-06fcddf2-b4e3-c67a-3418-7fcab0a98fc8" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.363 [INFO][6504] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:16.363 [INFO][6504] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:17.752 [INFO][6533] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:17.768 [INFO][6533] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:17.770 [INFO][6533] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:18.208 [INFO][6533] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:18.209 [INFO][6533] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:18.216 [INFO][6533] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:14:18.376816 env[1246]: 2025-07-10 01:14:18.306 [INFO][6504] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:14:18.376816 env[1246]: time="2025-07-10T01:14:18.377325084Z" level=info msg="TearDown network for sandbox \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\" successfully" Jul 10 01:14:18.376816 env[1246]: time="2025-07-10T01:14:18.377355046Z" level=info msg="StopPodSandbox for \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\" returns successfully" Jul 10 01:14:18.376816 env[1246]: time="2025-07-10T01:14:18.377452631Z" level=info msg="TearDown network for sandbox \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\" successfully" Jul 10 01:14:18.376816 env[1246]: time="2025-07-10T01:14:18.377476465Z" level=info msg="StopPodSandbox for \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\" returns successfully" Jul 10 01:14:18.472543 systemd[1]: run-netns-cni\x2d820e8912\x2de4c7\x2d566d\x2d394c\x2d7d07fa4eefb7.mount: Deactivated successfully. Jul 10 01:14:18.472640 systemd[1]: run-netns-cni\x2d06fcddf2\x2db4e3\x2dc67a\x2d3418\x2d7fcab0a98fc8.mount: Deactivated successfully. Jul 10 01:14:21.935550 systemd[1]: run-containerd-runc-k8s.io-46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde-runc.mUd1Sv.mount: Deactivated successfully. Jul 10 01:14:24.237305 kubelet[2106]: E0710 01:14:24.078473 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="3.877s" Jul 10 01:14:24.530493 kubelet[2106]: I0710 01:14:24.529879 2106 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/86db2015-705f-4be8-a79f-2635acd70c3f-calico-apiserver-certs\") pod \"86db2015-705f-4be8-a79f-2635acd70c3f\" (UID: \"86db2015-705f-4be8-a79f-2635acd70c3f\") " Jul 10 01:14:24.530493 kubelet[2106]: I0710 01:14:24.529936 2106 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-p56jl\" (UniqueName: \"kubernetes.io/projected/286d1b36-f2b8-4812-b1e3-9fca1cab12f4-kube-api-access-p56jl\") pod \"286d1b36-f2b8-4812-b1e3-9fca1cab12f4\" (UID: \"286d1b36-f2b8-4812-b1e3-9fca1cab12f4\") " Jul 10 01:14:24.530493 kubelet[2106]: I0710 01:14:24.529950 2106 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/286d1b36-f2b8-4812-b1e3-9fca1cab12f4-calico-apiserver-certs\") pod \"286d1b36-f2b8-4812-b1e3-9fca1cab12f4\" (UID: \"286d1b36-f2b8-4812-b1e3-9fca1cab12f4\") " Jul 10 01:14:24.530493 kubelet[2106]: I0710 01:14:24.529963 2106 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-lfktd\" (UniqueName: \"kubernetes.io/projected/86db2015-705f-4be8-a79f-2635acd70c3f-kube-api-access-lfktd\") pod \"86db2015-705f-4be8-a79f-2635acd70c3f\" (UID: \"86db2015-705f-4be8-a79f-2635acd70c3f\") " Jul 10 01:14:24.826547 systemd[1]: var-lib-kubelet-pods-286d1b36\x2df2b8\x2d4812\x2db1e3\x2d9fca1cab12f4-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 10 01:14:24.826618 systemd[1]: var-lib-kubelet-pods-86db2015\x2d705f\x2d4be8\x2da79f\x2d2635acd70c3f-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 10 01:14:24.826656 systemd[1]: var-lib-kubelet-pods-86db2015\x2d705f\x2d4be8\x2da79f\x2d2635acd70c3f-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dlfktd.mount: Deactivated successfully. Jul 10 01:14:24.826698 systemd[1]: var-lib-kubelet-pods-286d1b36\x2df2b8\x2d4812\x2db1e3\x2d9fca1cab12f4-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dp56jl.mount: Deactivated successfully. Jul 10 01:14:24.878954 kubelet[2106]: I0710 01:14:24.878908 2106 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/286d1b36-f2b8-4812-b1e3-9fca1cab12f4-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "286d1b36-f2b8-4812-b1e3-9fca1cab12f4" (UID: "286d1b36-f2b8-4812-b1e3-9fca1cab12f4"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 10 01:14:24.887579 kubelet[2106]: I0710 01:14:24.887537 2106 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/286d1b36-f2b8-4812-b1e3-9fca1cab12f4-kube-api-access-p56jl" (OuterVolumeSpecName: "kube-api-access-p56jl") pod "286d1b36-f2b8-4812-b1e3-9fca1cab12f4" (UID: "286d1b36-f2b8-4812-b1e3-9fca1cab12f4"). InnerVolumeSpecName "kube-api-access-p56jl". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 10 01:14:24.893516 kubelet[2106]: I0710 01:14:24.893473 2106 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/86db2015-705f-4be8-a79f-2635acd70c3f-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "86db2015-705f-4be8-a79f-2635acd70c3f" (UID: "86db2015-705f-4be8-a79f-2635acd70c3f"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 10 01:14:24.893627 kubelet[2106]: I0710 01:14:24.893541 2106 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/86db2015-705f-4be8-a79f-2635acd70c3f-kube-api-access-lfktd" (OuterVolumeSpecName: "kube-api-access-lfktd") pod "86db2015-705f-4be8-a79f-2635acd70c3f" (UID: "86db2015-705f-4be8-a79f-2635acd70c3f"). InnerVolumeSpecName "kube-api-access-lfktd". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 10 01:14:24.976582 kubelet[2106]: I0710 01:14:24.976553 2106 reconciler_common.go:293] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/286d1b36-f2b8-4812-b1e3-9fca1cab12f4-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 10 01:14:24.976582 kubelet[2106]: I0710 01:14:24.976584 2106 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-lfktd\" (UniqueName: \"kubernetes.io/projected/86db2015-705f-4be8-a79f-2635acd70c3f-kube-api-access-lfktd\") on node \"localhost\" DevicePath \"\"" Jul 10 01:14:24.980980 kubelet[2106]: I0710 01:14:24.976592 2106 reconciler_common.go:293] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/86db2015-705f-4be8-a79f-2635acd70c3f-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 10 01:14:24.980980 kubelet[2106]: I0710 01:14:24.976597 2106 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-p56jl\" (UniqueName: \"kubernetes.io/projected/286d1b36-f2b8-4812-b1e3-9fca1cab12f4-kube-api-access-p56jl\") on node \"localhost\" DevicePath \"\"" Jul 10 01:14:25.001279 systemd[1]: run-containerd-runc-k8s.io-3b710d5115631c01c0bb6a1f8e81b1960ad3db7e6b2e11f87fe772194a7d57b0-runc.2g7cex.mount: Deactivated successfully. Jul 10 01:14:25.114879 systemd[1]: Removed slice kubepods-besteffort-pod86db2015_705f_4be8_a79f_2635acd70c3f.slice. Jul 10 01:14:25.114956 systemd[1]: kubepods-besteffort-pod86db2015_705f_4be8_a79f_2635acd70c3f.slice: Consumed 2.097s CPU time. Jul 10 01:14:25.159843 systemd[1]: Removed slice kubepods-besteffort-pod286d1b36_f2b8_4812_b1e3_9fca1cab12f4.slice. Jul 10 01:14:25.159904 systemd[1]: kubepods-besteffort-pod286d1b36_f2b8_4812_b1e3_9fca1cab12f4.slice: Consumed 1.221s CPU time. Jul 10 01:14:25.633000 audit[6609]: NETFILTER_CFG table=filter:165 family=2 entries=8 op=nft_register_rule pid=6609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:25.698658 kernel: kauditd_printk_skb: 15 callbacks suppressed Jul 10 01:14:25.730170 kernel: audit: type=1325 audit(1752110065.633:1780): table=filter:165 family=2 entries=8 op=nft_register_rule pid=6609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:25.732483 kernel: audit: type=1300 audit(1752110065.633:1780): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcfe421780 a2=0 a3=7ffcfe42176c items=0 ppid=2209 pid=6609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:25.732525 kernel: audit: type=1327 audit(1752110065.633:1780): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:25.735613 kernel: audit: type=1325 audit(1752110065.647:1781): table=nat:166 family=2 entries=40 op=nft_register_rule pid=6609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:25.738601 kernel: audit: type=1300 audit(1752110065.647:1781): arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffcfe421780 a2=0 a3=7ffcfe42176c items=0 ppid=2209 pid=6609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:25.741021 kernel: audit: type=1327 audit(1752110065.647:1781): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:25.633000 audit[6609]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcfe421780 a2=0 a3=7ffcfe42176c items=0 ppid=2209 pid=6609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:25.633000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:25.647000 audit[6609]: NETFILTER_CFG table=nat:166 family=2 entries=40 op=nft_register_rule pid=6609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:14:25.647000 audit[6609]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffcfe421780 a2=0 a3=7ffcfe42176c items=0 ppid=2209 pid=6609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:25.647000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:14:28.228591 sshd[6521]: pam_unix(sshd:session): session closed for user core Jul 10 01:14:28.365408 kernel: audit: type=1130 audit(1752110068.328:1782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.108:22-139.178.68.195:57970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:28.380555 kernel: audit: type=1106 audit(1752110068.344:1783): pid=6521 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:28.380608 kernel: audit: type=1104 audit(1752110068.348:1784): pid=6521 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:28.380629 kernel: audit: type=1131 audit(1752110068.372:1785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.108:22-139.178.68.195:45116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:28.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.108:22-139.178.68.195:57970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:28.344000 audit[6521]: USER_END pid=6521 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:28.348000 audit[6521]: CRED_DISP pid=6521 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:28.372000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.108:22-139.178.68.195:45116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:28.325731 systemd[1]: Started sshd@15-139.178.70.108:22-139.178.68.195:57970.service. Jul 10 01:14:28.369084 systemd[1]: sshd@14-139.178.70.108:22-139.178.68.195:45116.service: Deactivated successfully. Jul 10 01:14:28.373813 systemd[1]: session-16.scope: Deactivated successfully. Jul 10 01:14:28.373929 systemd[1]: session-16.scope: Consumed 1.088s CPU time. Jul 10 01:14:28.378878 systemd-logind[1238]: Session 16 logged out. Waiting for processes to exit. Jul 10 01:14:28.379623 systemd-logind[1238]: Removed session 16. Jul 10 01:14:28.647000 audit[6664]: USER_ACCT pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:28.648000 audit[6664]: CRED_ACQ pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:28.648000 audit[6664]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa5f93e30 a2=3 a3=0 items=0 ppid=1 pid=6664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:28.648000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:14:28.678006 sshd[6664]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:14:28.726706 sshd[6664]: Accepted publickey for core from 139.178.68.195 port 57970 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:14:28.775641 systemd-logind[1238]: New session 17 of user core. Jul 10 01:14:28.779135 systemd[1]: Started session-17.scope. Jul 10 01:14:28.780809 kubelet[2106]: I0710 01:14:28.339496 2106 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="286d1b36-f2b8-4812-b1e3-9fca1cab12f4" path="/var/lib/kubelet/pods/286d1b36-f2b8-4812-b1e3-9fca1cab12f4/volumes" Jul 10 01:14:28.781000 audit[6664]: USER_START pid=6664 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:28.782000 audit[6667]: CRED_ACQ pid=6667 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:28.833661 kubelet[2106]: I0710 01:14:28.833623 2106 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="86db2015-705f-4be8-a79f-2635acd70c3f" path="/var/lib/kubelet/pods/86db2015-705f-4be8-a79f-2635acd70c3f/volumes" Jul 10 01:14:28.928943 kubelet[2106]: E0710 01:14:28.928912 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.702s" Jul 10 01:14:31.676787 sshd[6664]: pam_unix(sshd:session): session closed for user core Jul 10 01:14:31.722842 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 10 01:14:31.735725 kernel: audit: type=1106 audit(1752110071.676:1791): pid=6664 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:31.741027 kernel: audit: type=1104 audit(1752110071.676:1792): pid=6664 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:31.741076 kernel: audit: type=1131 audit(1752110071.690:1793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.108:22-139.178.68.195:57970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:31.741098 kernel: audit: type=1130 audit(1752110071.692:1794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.108:22-139.178.68.195:57978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:31.676000 audit[6664]: USER_END pid=6664 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:31.676000 audit[6664]: CRED_DISP pid=6664 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:31.690000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.108:22-139.178.68.195:57970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:31.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.108:22-139.178.68.195:57978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:31.691266 systemd[1]: sshd@15-139.178.70.108:22-139.178.68.195:57970.service: Deactivated successfully. Jul 10 01:14:31.691755 systemd[1]: session-17.scope: Deactivated successfully. Jul 10 01:14:31.693109 systemd-logind[1238]: Session 17 logged out. Waiting for processes to exit. Jul 10 01:14:31.693754 systemd[1]: Started sshd@16-139.178.70.108:22-139.178.68.195:57978.service. Jul 10 01:14:31.697249 systemd-logind[1238]: Removed session 17. Jul 10 01:14:31.911000 audit[6700]: USER_ACCT pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:31.916735 sshd[6700]: Accepted publickey for core from 139.178.68.195 port 57978 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:14:31.915000 audit[6700]: CRED_ACQ pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:31.921304 kernel: audit: type=1101 audit(1752110071.911:1795): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:31.921350 kernel: audit: type=1103 audit(1752110071.915:1796): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:31.923844 kernel: audit: type=1006 audit(1752110071.915:1797): pid=6700 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 10 01:14:31.923876 kernel: audit: type=1300 audit(1752110071.915:1797): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe96c750f0 a2=3 a3=0 items=0 ppid=1 pid=6700 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:31.915000 audit[6700]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe96c750f0 a2=3 a3=0 items=0 ppid=1 pid=6700 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:31.931485 kernel: audit: type=1327 audit(1752110071.915:1797): proctitle=737368643A20636F7265205B707269765D Jul 10 01:14:31.915000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:14:31.926577 sshd[6700]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:14:31.931708 systemd[1]: Started session-18.scope. Jul 10 01:14:31.931939 systemd-logind[1238]: New session 18 of user core. Jul 10 01:14:31.934000 audit[6700]: USER_START pid=6700 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:31.940220 kernel: audit: type=1105 audit(1752110071.934:1798): pid=6700 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:31.938000 audit[6702]: CRED_ACQ pid=6702 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:36.006712 kubelet[2106]: E0710 01:14:35.861420 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.5s" Jul 10 01:14:37.258814 sshd[6700]: pam_unix(sshd:session): session closed for user core Jul 10 01:14:37.400000 audit[6700]: USER_END pid=6700 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:37.423389 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 01:14:37.441242 kernel: audit: type=1106 audit(1752110077.400:1800): pid=6700 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:37.444000 audit[6700]: CRED_DISP pid=6700 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:37.453817 kernel: audit: type=1104 audit(1752110077.444:1801): pid=6700 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:37.553666 systemd[1]: sshd@16-139.178.70.108:22-139.178.68.195:57978.service: Deactivated successfully. Jul 10 01:14:37.559280 kernel: audit: type=1131 audit(1752110077.553:1802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.108:22-139.178.68.195:57978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:37.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.108:22-139.178.68.195:57978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:37.554556 systemd[1]: session-18.scope: Deactivated successfully. Jul 10 01:14:37.557492 systemd-logind[1238]: Session 18 logged out. Waiting for processes to exit. Jul 10 01:14:37.581820 systemd-logind[1238]: Removed session 18. Jul 10 01:14:41.605000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:41.722759 kernel: audit: type=1400 audit(1752110081.605:1803): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:41.744869 kernel: audit: type=1300 audit(1752110081.605:1803): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002678d80 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:14:41.744934 kernel: audit: type=1327 audit(1752110081.605:1803): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:41.757590 kernel: audit: type=1400 audit(1752110081.612:1804): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:41.763861 kernel: audit: type=1300 audit(1752110081.612:1804): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c00246d900 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:14:41.770972 kernel: audit: type=1327 audit(1752110081.612:1804): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:41.771020 kernel: audit: type=1400 audit(1752110081.637:1805): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:41.605000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002678d80 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:14:41.605000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:41.612000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:41.612000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c00246d900 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:14:41.612000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:41.637000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:41.637000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002678e60 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:14:41.637000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:41.668000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:41.668000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002678e80 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:14:41.668000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:42.350977 systemd[1]: Started sshd@17-139.178.70.108:22-139.178.68.195:51818.service. Jul 10 01:14:42.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.108:22-139.178.68.195:51818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:43.453794 sshd[6751]: Accepted publickey for core from 139.178.68.195 port 51818 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:14:43.459114 kernel: kauditd_printk_skb: 6 callbacks suppressed Jul 10 01:14:43.466734 kernel: audit: type=1101 audit(1752110083.452:1808): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:43.472945 kernel: audit: type=1103 audit(1752110083.461:1809): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:43.473017 kernel: audit: type=1006 audit(1752110083.461:1810): pid=6751 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Jul 10 01:14:43.473055 kernel: audit: type=1300 audit(1752110083.461:1810): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9602ff60 a2=3 a3=0 items=0 ppid=1 pid=6751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:43.452000 audit[6751]: USER_ACCT pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:43.479888 kernel: audit: type=1327 audit(1752110083.461:1810): proctitle=737368643A20636F7265205B707269765D Jul 10 01:14:43.461000 audit[6751]: CRED_ACQ pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:43.461000 audit[6751]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe9602ff60 a2=3 a3=0 items=0 ppid=1 pid=6751 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:43.461000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:14:43.481419 sshd[6751]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:14:43.607572 systemd[1]: Started session-19.scope. Jul 10 01:14:43.607708 systemd-logind[1238]: New session 19 of user core. Jul 10 01:14:43.625769 kernel: audit: type=1105 audit(1752110083.611:1811): pid=6751 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:43.625849 kernel: audit: type=1103 audit(1752110083.612:1812): pid=6753 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:43.611000 audit[6751]: USER_START pid=6751 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:43.612000 audit[6753]: CRED_ACQ pid=6753 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:47.810216 kernel: audit: type=1400 audit(1752110087.805:1813): avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:14:47.821949 kernel: audit: type=1300 audit(1752110087.805:1813): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001051240 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:14:47.824836 kernel: audit: type=1327 audit(1752110087.805:1813): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:14:47.805000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:14:47.805000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001051240 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:14:47.805000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:14:54.733833 kubelet[2106]: E0710 01:14:47.750111 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.173s" Jul 10 01:15:00.971497 systemd[1]: run-containerd-runc-k8s.io-8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc-runc.QqHfzS.mount: Deactivated successfully. Jul 10 01:15:04.073000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:04.326653 kernel: audit: type=1400 audit(1752110104.073:1814): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:04.334893 kernel: audit: type=1300 audit(1752110104.073:1814): arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00dd08e40 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:15:04.336829 kernel: audit: type=1327 audit(1752110104.073:1814): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:04.336879 kernel: audit: type=1400 audit(1752110104.084:1815): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:04.336903 kernel: audit: type=1300 audit(1752110104.084:1815): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00dd08e70 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:15:04.337001 kernel: audit: type=1327 audit(1752110104.084:1815): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:04.346274 kernel: audit: type=1400 audit(1752110104.091:1816): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:04.350648 kernel: audit: type=1300 audit(1752110104.091:1816): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00fce1900 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:15:04.350714 kernel: audit: type=1327 audit(1752110104.091:1816): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:04.350739 kernel: audit: type=1400 audit(1752110104.102:1817): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:04.073000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c00dd08e40 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:15:04.073000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:04.084000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:04.084000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00dd08e70 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:15:04.084000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:04.091000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:04.091000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00fce1900 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:15:04.091000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:04.102000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:04.102000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00fce1920 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:15:04.102000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:04.102000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:04.102000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c009e097d0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:15:04.102000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:04.114000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:04.114000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00dd08f00 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:15:04.114000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:11.085807 sshd[6751]: pam_unix(sshd:session): session closed for user core Jul 10 01:15:11.249852 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:15:11.263631 kernel: audit: type=1130 audit(1752110111.126:1820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.108:22-139.178.68.195:55310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:11.269980 kernel: audit: type=1106 audit(1752110111.142:1821): pid=6751 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.272451 kernel: audit: type=1104 audit(1752110111.146:1822): pid=6751 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.275194 kernel: audit: type=1131 audit(1752110111.150:1823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.108:22-139.178.68.195:51818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:11.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.108:22-139.178.68.195:55310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:11.142000 audit[6751]: USER_END pid=6751 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.146000 audit[6751]: CRED_DISP pid=6751 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.108:22-139.178.68.195:51818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:11.125490 systemd[1]: Started sshd@18-139.178.70.108:22-139.178.68.195:55310.service. Jul 10 01:15:11.324642 kernel: audit: type=1101 audit(1752110111.315:1824): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.324699 kernel: audit: type=1103 audit(1752110111.319:1825): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.315000 audit[6859]: USER_ACCT pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.333708 kernel: audit: type=1006 audit(1752110111.320:1826): pid=6859 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 10 01:15:11.333754 kernel: audit: type=1300 audit(1752110111.320:1826): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeda1e9030 a2=3 a3=0 items=0 ppid=1 pid=6859 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:11.333775 kernel: audit: type=1327 audit(1752110111.320:1826): proctitle=737368643A20636F7265205B707269765D Jul 10 01:15:11.319000 audit[6859]: CRED_ACQ pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.320000 audit[6859]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeda1e9030 a2=3 a3=0 items=0 ppid=1 pid=6859 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:11.363528 kernel: audit: type=1105 audit(1752110111.347:1827): pid=6859 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.320000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:15:11.347000 audit[6859]: USER_START pid=6859 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.352000 audit[6862]: CRED_ACQ pid=6862 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:11.151238 systemd[1]: sshd@17-139.178.70.108:22-139.178.68.195:51818.service: Deactivated successfully. Jul 10 01:15:11.333295 sshd[6859]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:15:11.365568 sshd[6859]: Accepted publickey for core from 139.178.68.195 port 55310 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:15:11.162676 systemd[1]: session-19.scope: Deactivated successfully. Jul 10 01:15:11.162787 systemd[1]: session-19.scope: Consumed 1.444s CPU time. Jul 10 01:15:11.163197 systemd-logind[1238]: Session 19 logged out. Waiting for processes to exit. Jul 10 01:15:11.164077 systemd-logind[1238]: Removed session 19. Jul 10 01:15:11.344647 systemd-logind[1238]: New session 20 of user core. Jul 10 01:15:11.345258 systemd[1]: Started session-20.scope. Jul 10 01:15:11.439118 kubelet[2106]: I0710 01:15:11.439083 2106 scope.go:117] "RemoveContainer" containerID="754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a" Jul 10 01:15:11.812312 env[1246]: time="2025-07-10T01:15:11.812277479Z" level=info msg="RemoveContainer for \"754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a\"" Jul 10 01:15:11.848253 env[1246]: time="2025-07-10T01:15:11.848220053Z" level=info msg="RemoveContainer for \"754d91233fc332737cdc56f19faeb81d3ef38039cdc617fcb25d7e32a6fdce9a\" returns successfully" Jul 10 01:15:11.991323 kubelet[2106]: I0710 01:15:11.991284 2106 scope.go:117] "RemoveContainer" containerID="00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06" Jul 10 01:15:12.101701 kubelet[2106]: E0710 01:15:12.101605 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="12.525s" Jul 10 01:15:12.324543 env[1246]: time="2025-07-10T01:15:12.324508077Z" level=info msg="RemoveContainer for \"00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06\"" Jul 10 01:15:12.348899 env[1246]: time="2025-07-10T01:15:12.348860351Z" level=info msg="RemoveContainer for \"00e722a2264b2e5c96e4724b3260a4c489c59cfba478f0b1f68cf2a583b70f06\" returns successfully" Jul 10 01:15:12.370930 env[1246]: time="2025-07-10T01:15:12.370677856Z" level=info msg="StopPodSandbox for \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\"" Jul 10 01:15:14.475430 sshd[6859]: pam_unix(sshd:session): session closed for user core Jul 10 01:15:14.570000 audit[6859]: USER_END pid=6859 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:14.573000 audit[6859]: CRED_DISP pid=6859 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:14.582000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.108:22-139.178.68.195:55322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:14.600000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.108:22-139.178.68.195:55310 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:14.583465 systemd[1]: Started sshd@19-139.178.70.108:22-139.178.68.195:55322.service. Jul 10 01:15:14.601934 systemd[1]: sshd@18-139.178.70.108:22-139.178.68.195:55310.service: Deactivated successfully. Jul 10 01:15:14.605310 systemd[1]: session-20.scope: Deactivated successfully. Jul 10 01:15:14.609567 systemd-logind[1238]: Session 20 logged out. Waiting for processes to exit. Jul 10 01:15:14.611053 systemd-logind[1238]: Removed session 20. Jul 10 01:15:14.825000 audit[6884]: USER_ACCT pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:14.826000 audit[6884]: CRED_ACQ pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:14.826000 audit[6884]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc79d6ae0 a2=3 a3=0 items=0 ppid=1 pid=6884 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:14.826000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:15:14.885223 sshd[6884]: Accepted publickey for core from 139.178.68.195 port 55322 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:15:14.838882 sshd[6884]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:15:14.996229 systemd[1]: Started session-21.scope. Jul 10 01:15:14.996629 systemd-logind[1238]: New session 21 of user core. Jul 10 01:15:15.002000 audit[6884]: USER_START pid=6884 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:15.004000 audit[6889]: CRED_ACQ pid=6889 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:14.741 [WARNING][6877] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:14.797 [INFO][6877] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:14.803 [INFO][6877] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" iface="eth0" netns="" Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:14.805 [INFO][6877] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:14.805 [INFO][6877] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:16.132 [INFO][6888] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:16.189 [INFO][6888] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:16.195 [INFO][6888] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:16.611 [WARNING][6888] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:16.611 [INFO][6888] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:16.630 [INFO][6888] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:15:16.779615 env[1246]: 2025-07-10 01:15:16.721 [INFO][6877] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:15:16.779615 env[1246]: time="2025-07-10T01:15:16.779499343Z" level=info msg="TearDown network for sandbox \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\" successfully" Jul 10 01:15:16.779615 env[1246]: time="2025-07-10T01:15:16.779523083Z" level=info msg="StopPodSandbox for \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\" returns successfully" Jul 10 01:15:17.765000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:17.864232 kernel: kauditd_printk_skb: 12 callbacks suppressed Jul 10 01:15:17.887331 kernel: audit: type=1400 audit(1752110117.765:1838): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:17.889716 kernel: audit: type=1300 audit(1752110117.765:1838): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002b1ec30 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:17.889749 kernel: audit: type=1327 audit(1752110117.765:1838): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:17.889774 kernel: audit: type=1400 audit(1752110117.778:1839): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:17.889793 kernel: audit: type=1300 audit(1752110117.778:1839): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002c3fce0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:17.894865 kernel: audit: type=1327 audit(1752110117.778:1839): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:17.765000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002b1ec30 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:17.765000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:17.778000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:17.778000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002c3fce0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:17.778000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:17.933443 env[1246]: time="2025-07-10T01:15:17.858046196Z" level=info msg="RemovePodSandbox for \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\"" Jul 10 01:15:17.933443 env[1246]: time="2025-07-10T01:15:17.858074230Z" level=info msg="Forcibly stopping sandbox \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\"" Jul 10 01:15:18.389686 kubelet[2106]: E0710 01:15:18.377758 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.814s" Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:20.236 [WARNING][6907] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:20.281 [INFO][6907] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:20.289 [INFO][6907] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" iface="eth0" netns="" Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:20.289 [INFO][6907] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:20.293 [INFO][6907] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:23.213 [INFO][6940] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:23.296 [INFO][6940] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:23.302 [INFO][6940] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:25.294 [WARNING][6940] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:25.341 [INFO][6940] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" HandleID="k8s-pod-network.8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Workload="localhost-k8s-calico--apiserver--c7878fddc--z4gjh-eth0" Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:27.923 [INFO][6940] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:15:28.258098 env[1246]: 2025-07-10 01:15:28.138 [INFO][6907] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7" Jul 10 01:15:28.258098 env[1246]: time="2025-07-10T01:15:28.214608812Z" level=info msg="TearDown network for sandbox \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\" successfully" Jul 10 01:15:28.762989 env[1246]: time="2025-07-10T01:15:28.517361355Z" level=info msg="RemovePodSandbox \"8ab5b8236b7fbb7d6090cf1509cceaffb1bce6e002eba7fffc153416aa3d2ec7\" returns successfully" Jul 10 01:15:42.023000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:42.385024 kernel: audit: type=1400 audit(1752110142.023:1840): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:42.414369 kernel: audit: type=1300 audit(1752110142.023:1840): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002db5460 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:42.414419 kernel: audit: type=1327 audit(1752110142.023:1840): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:42.414442 kernel: audit: type=1400 audit(1752110142.040:1841): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:42.414459 kernel: audit: type=1300 audit(1752110142.040:1841): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002d6b2a0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:42.414475 kernel: audit: type=1327 audit(1752110142.040:1841): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:42.426432 kernel: audit: type=1400 audit(1752110142.073:1842): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:42.429814 kernel: audit: type=1300 audit(1752110142.073:1842): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002db5500 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:42.435979 kernel: audit: type=1327 audit(1752110142.073:1842): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:42.436024 kernel: audit: type=1400 audit(1752110142.085:1843): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:42.023000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002db5460 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:42.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:42.040000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:42.040000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002d6b2a0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:42.040000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:42.073000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:42.073000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002db5500 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:42.073000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:42.085000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:42.085000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002d6b400 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:15:42.085000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:48.045000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:15:48.431125 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:15:48.464100 kernel: audit: type=1400 audit(1752110148.045:1844): avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:15:48.468876 kernel: audit: type=1300 audit(1752110148.045:1844): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000fc0a60 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:15:48.478181 kernel: audit: type=1327 audit(1752110148.045:1844): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:15:48.045000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000fc0a60 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:15:48.045000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:16:04.118000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:04.401981 kernel: audit: type=1400 audit(1752110164.118:1845): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:04.417405 kernel: audit: type=1300 audit(1752110164.118:1845): arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00bbee090 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:16:04.417454 kernel: audit: type=1327 audit(1752110164.118:1845): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:04.417474 kernel: audit: type=1400 audit(1752110164.138:1846): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:04.417492 kernel: audit: type=1300 audit(1752110164.138:1846): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00b845350 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:16:04.417508 kernel: audit: type=1327 audit(1752110164.138:1846): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:04.421346 kernel: audit: type=1400 audit(1752110164.250:1847): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:04.421444 kernel: audit: type=1300 audit(1752110164.250:1847): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00bb9e860 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:16:04.426228 kernel: audit: type=1327 audit(1752110164.250:1847): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:04.430115 kernel: audit: type=1400 audit(1752110164.260:1848): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:04.118000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00bbee090 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:16:04.118000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:04.138000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:04.138000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00b845350 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:16:04.138000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:04.250000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:04.250000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00bb9e860 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:16:04.250000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:04.260000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:04.260000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00bb9e880 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:16:04.260000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:04.290000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:04.290000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00b8453e0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:16:04.290000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:04.290000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:04.290000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c00b845410 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:16:04.290000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:17.497458 systemd[1]: cri-containerd-f6c4737e3e81d568549f9de1532bbc706ff5423b3f1709ff141ef8d73daf3cbd.scope: Deactivated successfully. Jul 10 01:16:17.815810 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:16:17.832251 kernel: audit: type=1334 audit(1752110177.511:1851): prog-id=246 op=UNLOAD Jul 10 01:16:17.841103 kernel: audit: type=1334 audit(1752110177.515:1852): prog-id=249 op=UNLOAD Jul 10 01:16:17.511000 audit: BPF prog-id=246 op=UNLOAD Jul 10 01:16:17.515000 audit: BPF prog-id=249 op=UNLOAD Jul 10 01:16:17.926611 env[1246]: time="2025-07-10T01:16:17.593100987Z" level=info msg="shim disconnected" id=f6c4737e3e81d568549f9de1532bbc706ff5423b3f1709ff141ef8d73daf3cbd Jul 10 01:16:17.926611 env[1246]: time="2025-07-10T01:16:17.593129065Z" level=warning msg="cleaning up after shim disconnected" id=f6c4737e3e81d568549f9de1532bbc706ff5423b3f1709ff141ef8d73daf3cbd namespace=k8s.io Jul 10 01:16:17.926611 env[1246]: time="2025-07-10T01:16:17.593136502Z" level=info msg="cleaning up dead shim" Jul 10 01:16:17.926611 env[1246]: time="2025-07-10T01:16:17.605251449Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:16:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6998 runtime=io.containerd.runc.v2\n" Jul 10 01:16:17.970000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:18.014270 kernel: audit: type=1400 audit(1752110177.970:1853): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:18.014334 kernel: audit: type=1300 audit(1752110177.970:1853): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002d6b1a0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:18.017755 kernel: audit: type=1327 audit(1752110177.970:1853): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:18.017796 kernel: audit: type=1400 audit(1752110178.015:1854): avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:17.970000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002d6b1a0 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:18.036696 kernel: audit: type=1300 audit(1752110178.015:1854): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0029c5980 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:18.036759 kernel: audit: type=1327 audit(1752110178.015:1854): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:17.970000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:18.015000 audit[5714]: AVC avc: denied { watch } for pid=5714 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:18.015000 audit[5714]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0029c5980 a2=fc6 a3=0 items=0 ppid=1806 pid=5714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:18.015000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:17.512605 systemd[1]: cri-containerd-f6c4737e3e81d568549f9de1532bbc706ff5423b3f1709ff141ef8d73daf3cbd.scope: Consumed 2.285s CPU time. Jul 10 01:16:17.662656 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f6c4737e3e81d568549f9de1532bbc706ff5423b3f1709ff141ef8d73daf3cbd-rootfs.mount: Deactivated successfully. Jul 10 01:16:19.042403 systemd[1]: cri-containerd-4b7d3caca20f67be8bae4fdbfe3bb513354cc7867ca80b3579468c006c4a2396.scope: Deactivated successfully. Jul 10 01:16:19.444173 kernel: audit: type=1334 audit(1752110179.049:1855): prog-id=250 op=UNLOAD Jul 10 01:16:19.468715 kernel: audit: type=1334 audit(1752110179.053:1856): prog-id=253 op=UNLOAD Jul 10 01:16:19.049000 audit: BPF prog-id=250 op=UNLOAD Jul 10 01:16:19.053000 audit: BPF prog-id=253 op=UNLOAD Jul 10 01:16:19.334000 audit: BPF prog-id=254 op=UNLOAD Jul 10 01:16:19.340000 audit: BPF prog-id=257 op=UNLOAD Jul 10 01:16:19.509231 env[1246]: time="2025-07-10T01:16:19.419148488Z" level=info msg="shim disconnected" id=4b7d3caca20f67be8bae4fdbfe3bb513354cc7867ca80b3579468c006c4a2396 Jul 10 01:16:19.509231 env[1246]: time="2025-07-10T01:16:19.419183959Z" level=warning msg="cleaning up after shim disconnected" id=4b7d3caca20f67be8bae4fdbfe3bb513354cc7867ca80b3579468c006c4a2396 namespace=k8s.io Jul 10 01:16:19.509231 env[1246]: time="2025-07-10T01:16:19.419200190Z" level=info msg="cleaning up dead shim" Jul 10 01:16:19.509231 env[1246]: time="2025-07-10T01:16:19.425681971Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:16:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7038 runtime=io.containerd.runc.v2\n" Jul 10 01:16:19.509231 env[1246]: time="2025-07-10T01:16:19.444954178Z" level=info msg="shim disconnected" id=b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866 Jul 10 01:16:19.509231 env[1246]: time="2025-07-10T01:16:19.444981157Z" level=warning msg="cleaning up after shim disconnected" id=b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866 namespace=k8s.io Jul 10 01:16:19.509231 env[1246]: time="2025-07-10T01:16:19.444987464Z" level=info msg="cleaning up dead shim" Jul 10 01:16:19.509231 env[1246]: time="2025-07-10T01:16:19.452847529Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:16:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7052 runtime=io.containerd.runc.v2\n" Jul 10 01:16:19.050600 systemd[1]: cri-containerd-4b7d3caca20f67be8bae4fdbfe3bb513354cc7867ca80b3579468c006c4a2396.scope: Consumed 4.385s CPU time. Jul 10 01:16:19.335000 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4b7d3caca20f67be8bae4fdbfe3bb513354cc7867ca80b3579468c006c4a2396-rootfs.mount: Deactivated successfully. Jul 10 01:16:19.335546 systemd[1]: cri-containerd-b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866.scope: Deactivated successfully. Jul 10 01:16:19.335733 systemd[1]: cri-containerd-b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866.scope: Consumed 4.302s CPU time. Jul 10 01:16:19.364385 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866-rootfs.mount: Deactivated successfully. Jul 10 01:16:20.925799 sshd[6884]: pam_unix(sshd:session): session closed for user core Jul 10 01:16:20.971550 systemd[1]: Started sshd@20-139.178.70.108:22-139.178.68.195:43330.service. Jul 10 01:16:20.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.108:22-139.178.68.195:43330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:21.026000 audit[6884]: USER_END pid=6884 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:21.030000 audit[6884]: CRED_DISP pid=6884 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:21.087485 systemd[1]: sshd@19-139.178.70.108:22-139.178.68.195:55322.service: Deactivated successfully. Jul 10 01:16:21.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.108:22-139.178.68.195:55322 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:21.088082 systemd[1]: session-21.scope: Deactivated successfully. Jul 10 01:16:21.094091 systemd-logind[1238]: Session 21 logged out. Waiting for processes to exit. Jul 10 01:16:21.095249 systemd-logind[1238]: Removed session 21. Jul 10 01:16:21.381000 audit[7066]: USER_ACCT pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:21.382000 audit[7066]: CRED_ACQ pid=7066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:21.382000 audit[7066]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd56ad0d30 a2=3 a3=0 items=0 ppid=1 pid=7066 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:21.382000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:16:21.509356 sshd[7066]: Accepted publickey for core from 139.178.68.195 port 43330 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:16:21.401340 sshd[7066]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:16:21.580000 audit[7071]: NETFILTER_CFG table=filter:167 family=2 entries=20 op=nft_register_rule pid=7071 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:16:21.580000 audit[7071]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffc5575a630 a2=0 a3=7ffc5575a61c items=0 ppid=2209 pid=7071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:21.580000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:16:21.585907 systemd-logind[1238]: New session 22 of user core. Jul 10 01:16:21.585000 audit[7071]: NETFILTER_CFG table=nat:168 family=2 entries=26 op=nft_register_rule pid=7071 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:16:21.585000 audit[7071]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffc5575a630 a2=0 a3=0 items=0 ppid=2209 pid=7071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:21.585000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:16:21.588580 systemd[1]: Started session-22.scope. Jul 10 01:16:21.594000 audit[7066]: USER_START pid=7066 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:21.595000 audit[7072]: CRED_ACQ pid=7072 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:24.617320 kubelet[2106]: W0710 01:16:24.612698 2106 reflector.go:484] object-"calico-system"/"whisker-backend-key-pair": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.728461 kubelet[2106]: W0710 01:16:24.728430 2106 reflector.go:484] object-"calico-system"/"goldmane-key-pair": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737118 kubelet[2106]: W0710 01:16:24.728481 2106 reflector.go:484] object-"kube-system"/"coredns": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737223 kubelet[2106]: W0710 01:16:24.737150 2106 reflector.go:484] object-"calico-apiserver"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737223 kubelet[2106]: W0710 01:16:24.737173 2106 reflector.go:484] object-"calico-apiserver"/"calico-apiserver-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737223 kubelet[2106]: W0710 01:16:24.737207 2106 reflector.go:484] object-"tigera-operator"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737300 kubelet[2106]: W0710 01:16:24.737230 2106 reflector.go:484] object-"calico-system"/"goldmane-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737300 kubelet[2106]: W0710 01:16:24.737247 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.RuntimeClass ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737300 kubelet[2106]: W0710 01:16:24.737267 2106 reflector.go:484] object-"calico-system"/"tigera-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737300 kubelet[2106]: W0710 01:16:24.737287 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.Node ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737385 kubelet[2106]: W0710 01:16:24.737306 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.CSIDriver ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737385 kubelet[2106]: W0710 01:16:24.737330 2106 reflector.go:484] object-"calico-system"/"goldmane": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737385 kubelet[2106]: W0710 01:16:24.737348 2106 reflector.go:484] pkg/kubelet/config/apiserver.go:66: watch of *v1.Pod ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737385 kubelet[2106]: W0710 01:16:24.737366 2106 reflector.go:484] object-"calico-system"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.737385 kubelet[2106]: W0710 01:16:24.737384 2106 reflector.go:484] object-"calico-system"/"node-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.740063 kubelet[2106]: W0710 01:16:24.737400 2106 reflector.go:484] object-"calico-system"/"typha-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.740063 kubelet[2106]: W0710 01:16:24.737417 2106 reflector.go:484] object-"kube-system"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:24.850165 systemd[1]: run-containerd-runc-k8s.io-46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde-runc.e0w2Hv.mount: Deactivated successfully. Jul 10 01:16:25.008260 kubelet[2106]: W0710 01:16:25.008161 2106 reflector.go:484] object-"kube-system"/"kube-proxy": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:25.013802 kubelet[2106]: W0710 01:16:25.013774 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.Service ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:25.077758 kubelet[2106]: W0710 01:16:25.077729 2106 reflector.go:484] object-"tigera-operator"/"kubernetes-services-endpoint": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:25.197240 kubelet[2106]: W0710 01:16:25.197205 2106 reflector.go:484] object-"calico-system"/"whisker-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:16:25.837154 systemd[1]: run-containerd-runc-k8s.io-46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde-runc.Jp1Onj.mount: Deactivated successfully. Jul 10 01:16:25.981126 env[1246]: time="2025-07-10T01:16:25.981011379Z" level=info msg="StopPodSandbox for \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\"" Jul 10 01:16:27.941394 systemd[1]: run-containerd-runc-k8s.io-46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde-runc.yNHzRO.mount: Deactivated successfully. Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:28.804 [WARNING][7185] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:28.827 [INFO][7185] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:28.827 [INFO][7185] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" iface="eth0" netns="" Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:28.827 [INFO][7185] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:28.827 [INFO][7185] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:30.918 [INFO][7231] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:30.930 [INFO][7231] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:30.932 [INFO][7231] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:30.974 [WARNING][7231] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:30.974 [INFO][7231] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:30.975 [INFO][7231] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:16:31.080443 env[1246]: 2025-07-10 01:16:31.011 [INFO][7185] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:16:31.259358 env[1246]: time="2025-07-10T01:16:31.086675561Z" level=info msg="TearDown network for sandbox \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\" successfully" Jul 10 01:16:31.259358 env[1246]: time="2025-07-10T01:16:31.086704273Z" level=info msg="StopPodSandbox for \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\" returns successfully" Jul 10 01:16:34.960979 env[1246]: time="2025-07-10T01:16:34.960864960Z" level=info msg="RemovePodSandbox for \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\"" Jul 10 01:16:34.960979 env[1246]: time="2025-07-10T01:16:34.960888928Z" level=info msg="Forcibly stopping sandbox \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\"" Jul 10 01:16:35.003847 kubelet[2106]: E0710 01:16:35.003813 2106 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1m12.595s" Jul 10 01:16:35.364380 kubelet[2106]: I0710 01:16:35.364349 2106 scope.go:117] "RemoveContainer" containerID="b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866" Jul 10 01:16:35.375125 kubelet[2106]: E0710 01:16:35.375085 2106 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 20s restarting failed container=tigera-operator pod=tigera-operator-5bf8dfcb4-cdnlq_tigera-operator(b67a7777-48fb-4ae9-8f99-799120f113c4)\"" pod="tigera-operator/tigera-operator-5bf8dfcb4-cdnlq" podUID="b67a7777-48fb-4ae9-8f99-799120f113c4" Jul 10 01:16:35.380280 kubelet[2106]: I0710 01:16:35.375449 2106 scope.go:117] "RemoveContainer" containerID="e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5" Jul 10 01:16:35.476656 sshd[7066]: pam_unix(sshd:session): session closed for user core Jul 10 01:16:35.551485 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 10 01:16:35.574037 kernel: audit: type=1130 audit(1752110195.497:1870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.108:22-139.178.68.195:52828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:35.591960 kernel: audit: type=1106 audit(1752110195.563:1871): pid=7066 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:35.592006 kernel: audit: type=1104 audit(1752110195.569:1872): pid=7066 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:35.594233 kernel: audit: type=1131 audit(1752110195.583:1873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.108:22-139.178.68.195:43330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:35.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.108:22-139.178.68.195:52828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:35.563000 audit[7066]: USER_END pid=7066 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:35.569000 audit[7066]: CRED_DISP pid=7066 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:35.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.108:22-139.178.68.195:43330 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:35.492095 systemd[1]: Started sshd@21-139.178.70.108:22-139.178.68.195:52828.service. Jul 10 01:16:35.651425 env[1246]: time="2025-07-10T01:16:35.558241221Z" level=info msg="RemoveContainer for \"e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5\"" Jul 10 01:16:35.651425 env[1246]: time="2025-07-10T01:16:35.588064355Z" level=info msg="RemoveContainer for \"e33c8489a9eaae06621c403db0474285a83b2277c5e88417a99cf0b69f1c1ba5\" returns successfully" Jul 10 01:16:35.651425 env[1246]: time="2025-07-10T01:16:35.600665454Z" level=info msg="RemoveContainer for \"ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304\"" Jul 10 01:16:35.651425 env[1246]: time="2025-07-10T01:16:35.611857445Z" level=info msg="RemoveContainer for \"ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304\" returns successfully" Jul 10 01:16:35.651425 env[1246]: time="2025-07-10T01:16:35.614258346Z" level=info msg="RemoveContainer for \"5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61\"" Jul 10 01:16:35.651425 env[1246]: time="2025-07-10T01:16:35.625527769Z" level=info msg="RemoveContainer for \"5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61\" returns successfully" Jul 10 01:16:35.653532 kubelet[2106]: I0710 01:16:35.588295 2106 scope.go:117] "RemoveContainer" containerID="ea70f97cb4e71cfa95c942d782c5671e07d1c877c76d710567258b738445d304" Jul 10 01:16:35.653532 kubelet[2106]: I0710 01:16:35.612084 2106 scope.go:117] "RemoveContainer" containerID="5d4f0c20beafb4ae5197c15579662b26cf8ff4ef9f3624cf0d67eaf9d0c5ed61" Jul 10 01:16:35.584040 systemd[1]: sshd@20-139.178.70.108:22-139.178.68.195:43330.service: Deactivated successfully. Jul 10 01:16:35.587671 systemd[1]: session-22.scope: Deactivated successfully. Jul 10 01:16:35.587764 systemd[1]: session-22.scope: Consumed 1.096s CPU time. Jul 10 01:16:35.589962 systemd-logind[1238]: Session 22 logged out. Waiting for processes to exit. Jul 10 01:16:35.590922 systemd-logind[1238]: Removed session 22. Jul 10 01:16:35.701000 audit[7273]: USER_ACCT pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:35.706857 sshd[7273]: Accepted publickey for core from 139.178.68.195 port 52828 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:16:35.707203 kernel: audit: type=1101 audit(1752110195.701:1874): pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:35.706000 audit[7273]: CRED_ACQ pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:35.712570 kernel: audit: type=1103 audit(1752110195.706:1875): pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:35.712676 kernel: audit: type=1006 audit(1752110195.707:1876): pid=7273 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 10 01:16:35.712698 kernel: audit: type=1300 audit(1752110195.707:1876): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd465c2b40 a2=3 a3=0 items=0 ppid=1 pid=7273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:35.707000 audit[7273]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd465c2b40 a2=3 a3=0 items=0 ppid=1 pid=7273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:35.733665 kernel: audit: type=1327 audit(1752110195.707:1876): proctitle=737368643A20636F7265205B707269765D Jul 10 01:16:35.707000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:16:35.718781 sshd[7273]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:16:35.754765 systemd-logind[1238]: New session 23 of user core. Jul 10 01:16:35.755412 systemd[1]: Started session-23.scope. Jul 10 01:16:35.757000 audit[7273]: USER_START pid=7273 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:35.763215 kernel: audit: type=1105 audit(1752110195.757:1877): pid=7273 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:35.761000 audit[7277]: CRED_ACQ pid=7277 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.019 [WARNING][7268] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" WorkloadEndpoint="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.020 [INFO][7268] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.020 [INFO][7268] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" iface="eth0" netns="" Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.020 [INFO][7268] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.020 [INFO][7268] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.538 [INFO][7287] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.554 [INFO][7287] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.556 [INFO][7287] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.596 [WARNING][7287] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.596 [INFO][7287] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" HandleID="k8s-pod-network.24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Workload="localhost-k8s-calico--apiserver--c7878fddc--hxlk4-eth0" Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.597 [INFO][7287] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:16:36.606689 env[1246]: 2025-07-10 01:16:36.600 [INFO][7268] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5" Jul 10 01:16:36.606689 env[1246]: time="2025-07-10T01:16:36.606289747Z" level=info msg="TearDown network for sandbox \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\" successfully" Jul 10 01:16:36.644000 audit[7273]: USER_END pid=7273 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:36.644000 audit[7273]: CRED_DISP pid=7273 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:36.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.108:22-139.178.68.195:52828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:36.645222 systemd[1]: sshd@21-139.178.70.108:22-139.178.68.195:52828.service: Deactivated successfully. Jul 10 01:16:36.657461 kubelet[2106]: I0710 01:16:36.620124 2106 scope.go:117] "RemoveContainer" containerID="f6c4737e3e81d568549f9de1532bbc706ff5423b3f1709ff141ef8d73daf3cbd" Jul 10 01:16:36.657461 kubelet[2106]: I0710 01:16:36.648241 2106 scope.go:117] "RemoveContainer" containerID="4b7d3caca20f67be8bae4fdbfe3bb513354cc7867ca80b3579468c006c4a2396" Jul 10 01:16:36.661163 env[1246]: time="2025-07-10T01:16:36.630842890Z" level=info msg="RemovePodSandbox \"24cef145d518b2656b1221f76c3e740af89816d5ca959e0263273b9ba5007da5\" returns successfully" Jul 10 01:16:36.643483 sshd[7273]: pam_unix(sshd:session): session closed for user core Jul 10 01:16:36.645746 systemd[1]: session-23.scope: Deactivated successfully. Jul 10 01:16:36.646606 systemd-logind[1238]: Session 23 logged out. Waiting for processes to exit. Jul 10 01:16:36.647093 systemd-logind[1238]: Removed session 23. Jul 10 01:16:36.698735 env[1246]: time="2025-07-10T01:16:36.698706708Z" level=info msg="CreateContainer within sandbox \"a588db7f7968a15fd1970fc5a82c9111c868d98058759c7a695dcc380d054906\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:2,}" Jul 10 01:16:36.699404 env[1246]: time="2025-07-10T01:16:36.698706257Z" level=info msg="CreateContainer within sandbox \"36994ee7c20691b6aa0c560c02f0e838f510122aed250d3960d4892028bec8ea\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:2,}" Jul 10 01:16:36.775972 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3003555848.mount: Deactivated successfully. Jul 10 01:16:36.778231 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4091570079.mount: Deactivated successfully. Jul 10 01:16:36.787999 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount387212543.mount: Deactivated successfully. Jul 10 01:16:36.797534 env[1246]: time="2025-07-10T01:16:36.797499060Z" level=info msg="CreateContainer within sandbox \"a588db7f7968a15fd1970fc5a82c9111c868d98058759c7a695dcc380d054906\" for &ContainerMetadata{Name:kube-scheduler,Attempt:2,} returns container id \"46fb6128d3199fd4798f6dec88bd71a945fce78089dbf7c377ac2476c8fcc6fd\"" Jul 10 01:16:36.798087 env[1246]: time="2025-07-10T01:16:36.798072941Z" level=info msg="StartContainer for \"46fb6128d3199fd4798f6dec88bd71a945fce78089dbf7c377ac2476c8fcc6fd\"" Jul 10 01:16:36.798983 env[1246]: time="2025-07-10T01:16:36.798960344Z" level=info msg="CreateContainer within sandbox \"36994ee7c20691b6aa0c560c02f0e838f510122aed250d3960d4892028bec8ea\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:2,} returns container id \"f692b5a378e3dcff095d0708a31369b89d3dbd13050585484bcca2e29b5c7335\"" Jul 10 01:16:36.799847 env[1246]: time="2025-07-10T01:16:36.799805098Z" level=info msg="StartContainer for \"f692b5a378e3dcff095d0708a31369b89d3dbd13050585484bcca2e29b5c7335\"" Jul 10 01:16:36.827750 systemd[1]: Started cri-containerd-46fb6128d3199fd4798f6dec88bd71a945fce78089dbf7c377ac2476c8fcc6fd.scope. Jul 10 01:16:36.832940 systemd[1]: Started cri-containerd-f692b5a378e3dcff095d0708a31369b89d3dbd13050585484bcca2e29b5c7335.scope. Jul 10 01:16:36.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit: BPF prog-id=258 op=LOAD Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1796 pid=7310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:36.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436666236313238643331393966643437393866366465633838626437 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1796 pid=7310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:36.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436666236313238643331393966643437393866366465633838626437 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit: BPF prog-id=259 op=LOAD Jul 10 01:16:36.873000 audit[7310]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e3f10 items=0 ppid=1796 pid=7310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:36.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436666236313238643331393966643437393866366465633838626437 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.873000 audit: BPF prog-id=260 op=LOAD Jul 10 01:16:36.873000 audit[7310]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001e3f58 items=0 ppid=1796 pid=7310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:36.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436666236313238643331393966643437393866366465633838626437 Jul 10 01:16:36.874000 audit: BPF prog-id=260 op=UNLOAD Jul 10 01:16:36.874000 audit: BPF prog-id=259 op=UNLOAD Jul 10 01:16:36.874000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.874000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.874000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.874000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.874000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.874000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.874000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.874000 audit[7310]: AVC avc: denied { perfmon } for pid=7310 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.874000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.874000 audit[7310]: AVC avc: denied { bpf } for pid=7310 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.874000 audit: BPF prog-id=261 op=LOAD Jul 10 01:16:36.874000 audit[7310]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000340368 items=0 ppid=1796 pid=7310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:36.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436666236313238643331393966643437393866366465633838626437 Jul 10 01:16:36.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit: BPF prog-id=262 op=LOAD Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1806 pid=7311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:36.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393262356133373865336463666630393564303730386133313336 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1806 pid=7311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:36.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393262356133373865336463666630393564303730386133313336 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit: BPF prog-id=263 op=LOAD Jul 10 01:16:36.887000 audit[7311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002a07c0 items=0 ppid=1806 pid=7311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:36.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393262356133373865336463666630393564303730386133313336 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit: BPF prog-id=264 op=LOAD Jul 10 01:16:36.887000 audit[7311]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002a0808 items=0 ppid=1806 pid=7311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:36.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393262356133373865336463666630393564303730386133313336 Jul 10 01:16:36.887000 audit: BPF prog-id=264 op=UNLOAD Jul 10 01:16:36.887000 audit: BPF prog-id=263 op=UNLOAD Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { perfmon } for pid=7311 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit[7311]: AVC avc: denied { bpf } for pid=7311 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:36.887000 audit: BPF prog-id=265 op=LOAD Jul 10 01:16:36.887000 audit[7311]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002a0c18 items=0 ppid=1806 pid=7311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:36.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6636393262356133373865336463666630393564303730386133313336 Jul 10 01:16:36.973837 env[1246]: time="2025-07-10T01:16:36.912101758Z" level=info msg="StartContainer for \"46fb6128d3199fd4798f6dec88bd71a945fce78089dbf7c377ac2476c8fcc6fd\" returns successfully" Jul 10 01:16:36.973837 env[1246]: time="2025-07-10T01:16:36.955374768Z" level=info msg="StartContainer for \"f692b5a378e3dcff095d0708a31369b89d3dbd13050585484bcca2e29b5c7335\" returns successfully" Jul 10 01:16:38.849000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:38.849000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000e34000 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:38.849000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:38.850000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:38.850000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00005a640 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:38.850000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:41.678435 systemd[1]: Started sshd@22-139.178.70.108:22-139.178.68.195:58320.service. Jul 10 01:16:41.744902 kernel: kauditd_printk_skb: 124 callbacks suppressed Jul 10 01:16:41.766440 kernel: audit: type=1130 audit(1752110201.680:1920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.108:22-139.178.68.195:58320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:41.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.108:22-139.178.68.195:58320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:42.073000 audit[7372]: USER_ACCT pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:42.094981 kernel: audit: type=1101 audit(1752110202.073:1921): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:42.095055 kernel: audit: type=1103 audit(1752110202.082:1922): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:42.095076 kernel: audit: type=1006 audit(1752110202.082:1923): pid=7372 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 10 01:16:42.095093 kernel: audit: type=1300 audit(1752110202.082:1923): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa6767460 a2=3 a3=0 items=0 ppid=1 pid=7372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:42.095202 kernel: audit: type=1327 audit(1752110202.082:1923): proctitle=737368643A20636F7265205B707269765D Jul 10 01:16:42.082000 audit[7372]: CRED_ACQ pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:42.082000 audit[7372]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa6767460 a2=3 a3=0 items=0 ppid=1 pid=7372 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:42.082000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:16:42.103798 sshd[7372]: Accepted publickey for core from 139.178.68.195 port 58320 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:16:42.099318 sshd[7372]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:16:42.150249 systemd-logind[1238]: New session 24 of user core. Jul 10 01:16:42.173806 kernel: audit: type=1105 audit(1752110202.154:1924): pid=7372 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:42.173873 kernel: audit: type=1103 audit(1752110202.158:1925): pid=7374 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:42.154000 audit[7372]: USER_START pid=7372 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:42.158000 audit[7374]: CRED_ACQ pid=7374 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:42.150598 systemd[1]: Started session-24.scope. Jul 10 01:16:43.342943 sshd[7372]: pam_unix(sshd:session): session closed for user core Jul 10 01:16:43.354651 kernel: audit: type=1106 audit(1752110203.343:1926): pid=7372 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:43.359002 kernel: audit: type=1104 audit(1752110203.347:1927): pid=7372 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:43.343000 audit[7372]: USER_END pid=7372 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:43.347000 audit[7372]: CRED_DISP pid=7372 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:43.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.108:22-139.178.68.195:58320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:43.352622 systemd-logind[1238]: Session 24 logged out. Waiting for processes to exit. Jul 10 01:16:43.356321 systemd[1]: sshd@22-139.178.70.108:22-139.178.68.195:58320.service: Deactivated successfully. Jul 10 01:16:43.365779 systemd[1]: session-24.scope: Deactivated successfully. Jul 10 01:16:43.366946 systemd-logind[1238]: Removed session 24. Jul 10 01:16:48.123957 kubelet[2106]: I0710 01:16:48.122358 2106 scope.go:117] "RemoveContainer" containerID="b6207cc40fe95a979ec07abe81a446e7228b8c62625bc0470a1f972812526866" Jul 10 01:16:48.173466 env[1246]: time="2025-07-10T01:16:48.172634820Z" level=info msg="CreateContainer within sandbox \"ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79\" for container &ContainerMetadata{Name:tigera-operator,Attempt:3,}" Jul 10 01:16:48.191413 env[1246]: time="2025-07-10T01:16:48.191362375Z" level=info msg="CreateContainer within sandbox \"ad8aa3d1e01bd5e64268dfe9a730b57d920724950ecc8f7ab6cb37991e604a79\" for &ContainerMetadata{Name:tigera-operator,Attempt:3,} returns container id \"64fe59bd7a94dbeb0167141121fe7d347ddb7ba6e1de66f9b010da551cb27301\"" Jul 10 01:16:48.194278 env[1246]: time="2025-07-10T01:16:48.191687905Z" level=info msg="StartContainer for \"64fe59bd7a94dbeb0167141121fe7d347ddb7ba6e1de66f9b010da551cb27301\"" Jul 10 01:16:48.231437 systemd[1]: Started cri-containerd-64fe59bd7a94dbeb0167141121fe7d347ddb7ba6e1de66f9b010da551cb27301.scope. Jul 10 01:16:48.233301 systemd[1]: run-containerd-runc-k8s.io-64fe59bd7a94dbeb0167141121fe7d347ddb7ba6e1de66f9b010da551cb27301-runc.9dosDi.mount: Deactivated successfully. Jul 10 01:16:48.261943 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 01:16:48.268382 kernel: audit: type=1400 audit(1752110208.257:1929): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.268472 kernel: audit: type=1400 audit(1752110208.257:1930): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.271069 kernel: audit: type=1400 audit(1752110208.257:1931): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.271099 kernel: audit: type=1400 audit(1752110208.257:1932): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.271119 kernel: audit: type=1400 audit(1752110208.257:1933): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.291290 kernel: audit: type=1400 audit(1752110208.257:1934): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.291355 kernel: audit: type=1400 audit(1752110208.257:1935): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.291375 kernel: audit: type=1400 audit(1752110208.257:1936): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.294856 kernel: audit: type=1400 audit(1752110208.257:1937): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.296062 kernel: audit: type=1400 audit(1752110208.261:1938): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.261000 audit: BPF prog-id=266 op=LOAD Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2230 pid=7391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:48.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634666535396264376139346462656230313637313431313231666537 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2230 pid=7391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:48.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634666535396264376139346462656230313637313431313231666537 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit: BPF prog-id=267 op=LOAD Jul 10 01:16:48.264000 audit[7391]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00028fc80 items=0 ppid=2230 pid=7391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:48.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634666535396264376139346462656230313637313431313231666537 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.264000 audit: BPF prog-id=268 op=LOAD Jul 10 01:16:48.264000 audit[7391]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00028fcc8 items=0 ppid=2230 pid=7391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:48.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634666535396264376139346462656230313637313431313231666537 Jul 10 01:16:48.264000 audit: BPF prog-id=268 op=UNLOAD Jul 10 01:16:48.264000 audit: BPF prog-id=267 op=UNLOAD Jul 10 01:16:48.265000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.265000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.265000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.265000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.265000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.265000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.265000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.265000 audit[7391]: AVC avc: denied { perfmon } for pid=7391 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.265000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.265000 audit[7391]: AVC avc: denied { bpf } for pid=7391 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:16:48.265000 audit: BPF prog-id=269 op=LOAD Jul 10 01:16:48.265000 audit[7391]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00038a0d8 items=0 ppid=2230 pid=7391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:48.265000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634666535396264376139346462656230313637313431313231666537 Jul 10 01:16:48.315000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:16:48.315000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c14e0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:16:48.315000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:16:48.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.108:22-139.178.68.195:45676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:48.410975 env[1246]: time="2025-07-10T01:16:48.297762696Z" level=info msg="StartContainer for \"64fe59bd7a94dbeb0167141121fe7d347ddb7ba6e1de66f9b010da551cb27301\" returns successfully" Jul 10 01:16:48.362635 systemd[1]: Started sshd@23-139.178.70.108:22-139.178.68.195:45676.service. Jul 10 01:16:48.749000 audit[7430]: USER_ACCT pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:48.753000 audit[7430]: CRED_ACQ pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:48.753000 audit[7430]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd1281d20 a2=3 a3=0 items=0 ppid=1 pid=7430 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:48.753000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:16:48.785423 sshd[7430]: Accepted publickey for core from 139.178.68.195 port 45676 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:16:48.765639 sshd[7430]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:16:48.792407 systemd[1]: Started session-25.scope. Jul 10 01:16:48.793072 systemd-logind[1238]: New session 25 of user core. Jul 10 01:16:48.799000 audit[7430]: USER_START pid=7430 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:48.800000 audit[7441]: CRED_ACQ pid=7441 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:49.973800 sshd[7430]: pam_unix(sshd:session): session closed for user core Jul 10 01:16:49.989000 audit[7430]: USER_END pid=7430 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:49.993000 audit[7430]: CRED_DISP pid=7430 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:50.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.108:22-139.178.68.195:45676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:50.040951 systemd[1]: sshd@23-139.178.70.108:22-139.178.68.195:45676.service: Deactivated successfully. Jul 10 01:16:50.052435 systemd[1]: session-25.scope: Deactivated successfully. Jul 10 01:16:50.052962 systemd-logind[1238]: Session 25 logged out. Waiting for processes to exit. Jul 10 01:16:50.071080 systemd-logind[1238]: Removed session 25. Jul 10 01:16:55.186252 kernel: kauditd_printk_skb: 61 callbacks suppressed Jul 10 01:16:55.285983 kernel: audit: type=1130 audit(1752110215.179:1957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.108:22-139.178.68.195:45688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:55.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.108:22-139.178.68.195:45688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:55.174461 systemd[1]: Started sshd@24-139.178.70.108:22-139.178.68.195:45688.service. Jul 10 01:16:55.568000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:55.616272 kernel: audit: type=1400 audit(1752110215.568:1958): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:55.618899 kernel: audit: type=1300 audit(1752110215.568:1958): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ca9500 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:55.620572 kernel: audit: type=1327 audit(1752110215.568:1958): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:55.621903 kernel: audit: type=1400 audit(1752110215.572:1959): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:55.621937 kernel: audit: type=1300 audit(1752110215.572:1959): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000aed3e0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:55.625389 kernel: audit: type=1327 audit(1752110215.572:1959): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:55.625425 kernel: audit: type=1400 audit(1752110215.577:1960): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:55.625444 kernel: audit: type=1300 audit(1752110215.577:1960): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ca9520 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:55.625464 kernel: audit: type=1327 audit(1752110215.577:1960): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:55.568000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ca9500 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:55.568000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:55.572000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:55.572000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000aed3e0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:55.572000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:55.577000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:55.577000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ca9520 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:55.577000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:55.577000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:55.577000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000aed400 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:55.577000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:55.635000 audit[7478]: USER_ACCT pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:55.641164 sshd[7478]: Accepted publickey for core from 139.178.68.195 port 45688 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:16:55.661000 audit[7478]: CRED_ACQ pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:55.661000 audit[7478]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6b442830 a2=3 a3=0 items=0 ppid=1 pid=7478 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:16:55.661000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:16:55.670000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7350 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:16:55.670000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000adfb80 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:55.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:55.680000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=8241 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:16:55.680000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000c0af00 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:55.680000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:55.671518 sshd[7478]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:16:55.701648 systemd[1]: run-containerd-runc-k8s.io-46865732dd67c7fcf1ab84889c36de0562dcc2380cc1d70982fdebf32771dfde-runc.3iT2j9.mount: Deactivated successfully. Jul 10 01:16:55.877467 systemd[1]: Started session-26.scope. Jul 10 01:16:55.878648 systemd-logind[1238]: New session 26 of user core. Jul 10 01:16:55.891000 audit[7478]: USER_START pid=7478 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:55.903000 audit[7519]: CRED_ACQ pid=7519 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:16:59.274000 audit[7534]: AVC avc: denied { execute } for pid=7534 comm="kube-controller" name="uds" dev="sda9" ino=8428 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 10 01:16:59.274000 audit[7534]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c000b88960 a1=c00226b230 a2=c00221ed00 a3=0 items=0 ppid=7343 pid=7534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:16:59.274000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:00.834057 env[1246]: time="2025-07-10T01:17:00.833977088Z" level=error msg="ExecSync for \"8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Jul 10 01:17:02.684000 audit[7538]: NETFILTER_CFG table=filter:169 family=2 entries=32 op=nft_register_rule pid=7538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:03.095286 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 10 01:17:03.112832 kernel: audit: type=1325 audit(1752110222.684:1970): table=filter:169 family=2 entries=32 op=nft_register_rule pid=7538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:03.118243 kernel: audit: type=1300 audit(1752110222.684:1970): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd506d7860 a2=0 a3=7ffd506d784c items=0 ppid=2209 pid=7538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:03.118296 kernel: audit: type=1327 audit(1752110222.684:1970): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:03.118319 kernel: audit: type=1325 audit(1752110222.695:1971): table=nat:170 family=2 entries=26 op=nft_register_rule pid=7538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:03.118336 kernel: audit: type=1300 audit(1752110222.695:1971): arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd506d7860 a2=0 a3=0 items=0 ppid=2209 pid=7538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:03.118352 kernel: audit: type=1327 audit(1752110222.695:1971): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:02.684000 audit[7538]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd506d7860 a2=0 a3=7ffd506d784c items=0 ppid=2209 pid=7538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:02.684000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:02.695000 audit[7538]: NETFILTER_CFG table=nat:170 family=2 entries=26 op=nft_register_rule pid=7538 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:02.695000 audit[7538]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd506d7860 a2=0 a3=0 items=0 ppid=2209 pid=7538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:02.695000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:04.265000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:04.308743 kernel: audit: type=1400 audit(1752110224.265:1972): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:04.308818 kernel: audit: type=1400 audit(1752110224.267:1973): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:04.310987 kernel: audit: type=1300 audit(1752110224.267:1973): arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c0040d7f60 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:17:04.311015 kernel: audit: type=1327 audit(1752110224.267:1973): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:04.267000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:04.267000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c0040d7f60 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:17:04.267000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:04.265000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00e41e580 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:17:04.265000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:04.290000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:04.290000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c007cafb30 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:17:04.290000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:04.291000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:04.291000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c007cafd10 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:17:04.291000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:04.575000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:04.575000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c010c662d0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:17:04.575000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:04.619000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:04.619000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c010b0f740 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:17:04.619000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:05.252415 systemd[1]: Started sshd@25-139.178.70.108:22-194.0.234.93:56144.service. Jul 10 01:17:05.262000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-139.178.70.108:22-194.0.234.93:56144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:17:07.291903 sshd[7540]: Connection closed by authenticating user root 194.0.234.93 port 56144 [preauth] Jul 10 01:17:07.290000 audit[7540]: USER_ERR pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.0.234.93 addr=194.0.234.93 terminal=ssh res=failed' Jul 10 01:17:07.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-139.178.70.108:22-194.0.234.93:56144 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:17:07.292714 systemd[1]: sshd@25-139.178.70.108:22-194.0.234.93:56144.service: Deactivated successfully. Jul 10 01:17:10.665000 audit[7544]: NETFILTER_CFG table=filter:171 family=2 entries=20 op=nft_register_rule pid=7544 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:10.788959 kernel: kauditd_printk_skb: 17 callbacks suppressed Jul 10 01:17:10.802267 kernel: audit: type=1325 audit(1752110230.665:1981): table=filter:171 family=2 entries=20 op=nft_register_rule pid=7544 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:10.802335 kernel: audit: type=1300 audit(1752110230.665:1981): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd52183780 a2=0 a3=7ffd5218376c items=0 ppid=2209 pid=7544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:10.802355 kernel: audit: type=1327 audit(1752110230.665:1981): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:10.802373 kernel: audit: type=1325 audit(1752110230.674:1982): table=nat:172 family=2 entries=110 op=nft_register_chain pid=7544 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:10.803431 kernel: audit: type=1300 audit(1752110230.674:1982): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffd52183780 a2=0 a3=7ffd5218376c items=0 ppid=2209 pid=7544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:10.805614 kernel: audit: type=1327 audit(1752110230.674:1982): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:10.665000 audit[7544]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd52183780 a2=0 a3=7ffd5218376c items=0 ppid=2209 pid=7544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:10.665000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:10.674000 audit[7544]: NETFILTER_CFG table=nat:172 family=2 entries=110 op=nft_register_chain pid=7544 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:10.674000 audit[7544]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffd52183780 a2=0 a3=7ffd5218376c items=0 ppid=2209 pid=7544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:10.674000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:11.977790 kubelet[2106]: W0710 01:17:11.190900 2106 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@25-139.178.70.108:22-194.0.234.93:56144.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@25-139.178.70.108:22-194.0.234.93:56144.service: no such file or directory Jul 10 01:17:12.231443 kubelet[2106]: E0710 01:17:11.093671 2106 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="8e5bb229e07753a6869590c1d2243e4c3f09f13fcca80bca1ecbea44104abebc" cmd=["/health","-ready"] Jul 10 01:17:39.098000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:39.612452 kernel: audit: type=1400 audit(1752110259.098:1983): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:39.684441 kernel: audit: type=1300 audit(1752110259.098:1983): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002c590c0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:39.687860 kernel: audit: type=1327 audit(1752110259.098:1983): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:39.687899 kernel: audit: type=1400 audit(1752110259.098:1984): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:39.690263 kernel: audit: type=1300 audit(1752110259.098:1984): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002c8b4d0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:39.698619 kernel: audit: type=1327 audit(1752110259.098:1984): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:39.098000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002c590c0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:39.098000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:39.098000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:39.098000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002c8b4d0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:39.098000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:48.392000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:17:48.592414 kernel: audit: type=1400 audit(1752110268.392:1985): avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:17:48.604626 kernel: audit: type=1300 audit(1752110268.392:1985): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c1220 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:17:48.614781 kernel: audit: type=1327 audit(1752110268.392:1985): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:17:48.392000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0003c1220 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:17:48.392000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:17:56.602000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:57.206380 kernel: audit: type=1400 audit(1752110276.602:1986): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:57.523435 kernel: audit: type=1300 audit(1752110276.602:1986): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002dfcc80 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:57.550013 kernel: audit: type=1327 audit(1752110276.602:1986): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:57.577589 kernel: audit: type=1400 audit(1752110276.857:1987): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:57.609297 kernel: audit: type=1300 audit(1752110276.857:1987): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c002c9daa0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:57.619858 kernel: audit: type=1327 audit(1752110276.857:1987): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:57.633578 kernel: audit: type=1400 audit(1752110276.870:1988): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:57.647664 kernel: audit: type=1300 audit(1752110276.870:1988): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002c9dac0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:57.659799 kernel: audit: type=1327 audit(1752110276.870:1988): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:57.668383 kernel: audit: type=1400 audit(1752110276.906:1989): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:56.602000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002dfcc80 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:56.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:56.857000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:56.857000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c002c9daa0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:56.857000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:56.870000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:56.870000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002c9dac0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:56.870000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:56.906000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:56.906000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002dfcce0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:17:56.906000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:04.400000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:04.746334 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:18:04.776358 kernel: audit: type=1400 audit(1752110284.400:1990): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:04.788615 kernel: audit: type=1300 audit(1752110284.400:1990): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00bb66fc0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:18:04.794324 kernel: audit: type=1327 audit(1752110284.400:1990): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:04.794370 kernel: audit: type=1400 audit(1752110284.486:1991): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:04.794492 kernel: audit: type=1300 audit(1752110284.486:1991): arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0046e61a0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:18:04.794516 kernel: audit: type=1327 audit(1752110284.486:1991): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:04.801615 kernel: audit: type=1400 audit(1752110284.576:1992): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:04.807820 kernel: audit: type=1300 audit(1752110284.576:1992): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00bb67050 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:18:04.815479 kernel: audit: type=1327 audit(1752110284.576:1992): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:04.819432 kernel: audit: type=1400 audit(1752110284.592:1993): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:04.400000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00bb66fc0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:18:04.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:04.486000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:04.486000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0046e61a0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:18:04.486000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:04.576000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:04.576000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00bb67050 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:18:04.576000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:04.592000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:04.592000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c00fa66cc0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:18:04.592000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:04.663000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:04.663000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c0132bc340 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:18:04.663000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:04.880000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:04.880000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00fa66e40 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:18:04.880000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:08.244254 systemd[1]: cri-containerd-46fb6128d3199fd4798f6dec88bd71a945fce78089dbf7c377ac2476c8fcc6fd.scope: Deactivated successfully. Jul 10 01:18:08.257000 audit: BPF prog-id=258 op=UNLOAD Jul 10 01:18:08.263000 audit: BPF prog-id=261 op=UNLOAD Jul 10 01:18:08.533788 env[1246]: time="2025-07-10T01:18:08.353942005Z" level=info msg="shim disconnected" id=46fb6128d3199fd4798f6dec88bd71a945fce78089dbf7c377ac2476c8fcc6fd Jul 10 01:18:08.533788 env[1246]: time="2025-07-10T01:18:08.353984428Z" level=warning msg="cleaning up after shim disconnected" id=46fb6128d3199fd4798f6dec88bd71a945fce78089dbf7c377ac2476c8fcc6fd namespace=k8s.io Jul 10 01:18:08.533788 env[1246]: time="2025-07-10T01:18:08.353998062Z" level=info msg="cleaning up dead shim" Jul 10 01:18:08.533788 env[1246]: time="2025-07-10T01:18:08.380133358Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:18:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7592 runtime=io.containerd.runc.v2\n" Jul 10 01:18:08.258626 systemd[1]: cri-containerd-46fb6128d3199fd4798f6dec88bd71a945fce78089dbf7c377ac2476c8fcc6fd.scope: Consumed 1.018s CPU time. Jul 10 01:18:08.405810 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-46fb6128d3199fd4798f6dec88bd71a945fce78089dbf7c377ac2476c8fcc6fd-rootfs.mount: Deactivated successfully. Jul 10 01:18:12.683000 audit[7606]: NETFILTER_CFG table=filter:173 family=2 entries=8 op=nft_register_rule pid=7606 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:12.942745 kernel: kauditd_printk_skb: 10 callbacks suppressed Jul 10 01:18:12.977457 kernel: audit: type=1325 audit(1752110292.683:1998): table=filter:173 family=2 entries=8 op=nft_register_rule pid=7606 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:12.979654 kernel: audit: type=1300 audit(1752110292.683:1998): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff7ccd2600 a2=0 a3=7fff7ccd25ec items=0 ppid=2209 pid=7606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:12.979688 kernel: audit: type=1327 audit(1752110292.683:1998): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:12.979706 kernel: audit: type=1325 audit(1752110292.730:1999): table=nat:174 family=2 entries=86 op=nft_unregister_chain pid=7606 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:12.982129 kernel: audit: type=1300 audit(1752110292.730:1999): arch=c000003e syscall=46 success=yes exit=26100 a0=3 a1=7fff7ccd2600 a2=0 a3=7fff7ccd25ec items=0 ppid=2209 pid=7606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:12.982167 kernel: audit: type=1327 audit(1752110292.730:1999): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:12.683000 audit[7606]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff7ccd2600 a2=0 a3=7fff7ccd25ec items=0 ppid=2209 pid=7606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:12.683000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:12.730000 audit[7606]: NETFILTER_CFG table=nat:174 family=2 entries=86 op=nft_unregister_chain pid=7606 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:12.730000 audit[7606]: SYSCALL arch=c000003e syscall=46 success=yes exit=26100 a0=3 a1=7fff7ccd2600 a2=0 a3=7fff7ccd25ec items=0 ppid=2209 pid=7606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:12.730000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:16.212000 audit[7609]: NETFILTER_CFG table=filter:175 family=2 entries=8 op=nft_register_rule pid=7609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:16.505450 kernel: audit: type=1325 audit(1752110296.212:2000): table=filter:175 family=2 entries=8 op=nft_register_rule pid=7609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:16.517488 kernel: audit: type=1300 audit(1752110296.212:2000): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff58217650 a2=0 a3=7fff5821763c items=0 ppid=2209 pid=7609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:16.517541 kernel: audit: type=1327 audit(1752110296.212:2000): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:16.520628 kernel: audit: type=1325 audit(1752110296.258:2001): table=nat:176 family=2 entries=62 op=nft_unregister_chain pid=7609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:16.212000 audit[7609]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff58217650 a2=0 a3=7fff5821763c items=0 ppid=2209 pid=7609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:16.212000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:16.258000 audit[7609]: NETFILTER_CFG table=nat:176 family=2 entries=62 op=nft_unregister_chain pid=7609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:16.258000 audit[7609]: SYSCALL arch=c000003e syscall=46 success=yes exit=20228 a0=3 a1=7fff58217650 a2=0 a3=7fff5821763c items=0 ppid=2209 pid=7609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:16.258000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:21.152000 audit[7611]: NETFILTER_CFG table=filter:177 family=2 entries=11 op=nft_register_rule pid=7611 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:21.430975 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:18:21.453164 kernel: audit: type=1325 audit(1752110301.152:2002): table=filter:177 family=2 entries=11 op=nft_register_rule pid=7611 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:21.453251 kernel: audit: type=1300 audit(1752110301.152:2002): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcd6170250 a2=0 a3=7ffcd617023c items=0 ppid=2209 pid=7611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:21.457594 kernel: audit: type=1327 audit(1752110301.152:2002): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:21.463102 kernel: audit: type=1325 audit(1752110301.170:2003): table=nat:178 family=2 entries=65 op=nft_unregister_chain pid=7611 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:21.463146 kernel: audit: type=1300 audit(1752110301.170:2003): arch=c000003e syscall=46 success=yes exit=15756 a0=3 a1=7ffcd6170250 a2=0 a3=7ffcd617023c items=0 ppid=2209 pid=7611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:21.463169 kernel: audit: type=1327 audit(1752110301.170:2003): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:21.152000 audit[7611]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcd6170250 a2=0 a3=7ffcd617023c items=0 ppid=2209 pid=7611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:21.152000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:21.170000 audit[7611]: NETFILTER_CFG table=nat:178 family=2 entries=65 op=nft_unregister_chain pid=7611 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:21.170000 audit[7611]: SYSCALL arch=c000003e syscall=46 success=yes exit=15756 a0=3 a1=7ffcd6170250 a2=0 a3=7ffcd617023c items=0 ppid=2209 pid=7611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:21.170000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:29.001000 audit[7616]: NETFILTER_CFG table=filter:179 family=2 entries=15 op=nft_register_rule pid=7616 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:29.156800 kernel: audit: type=1325 audit(1752110309.001:2004): table=filter:179 family=2 entries=15 op=nft_register_rule pid=7616 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:29.162758 kernel: audit: type=1300 audit(1752110309.001:2004): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe7b6f8660 a2=0 a3=7ffe7b6f864c items=0 ppid=2209 pid=7616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:29.162815 kernel: audit: type=1327 audit(1752110309.001:2004): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:29.166062 kernel: audit: type=1325 audit(1752110309.015:2005): table=nat:180 family=2 entries=49 op=nft_unregister_chain pid=7616 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:29.166106 kernel: audit: type=1300 audit(1752110309.015:2005): arch=c000003e syscall=46 success=yes exit=14476 a0=3 a1=7ffe7b6f8660 a2=0 a3=7ffe7b6f864c items=0 ppid=2209 pid=7616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:29.166124 kernel: audit: type=1327 audit(1752110309.015:2005): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:29.001000 audit[7616]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffe7b6f8660 a2=0 a3=7ffe7b6f864c items=0 ppid=2209 pid=7616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:29.001000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:29.015000 audit[7616]: NETFILTER_CFG table=nat:180 family=2 entries=49 op=nft_unregister_chain pid=7616 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:29.015000 audit[7616]: SYSCALL arch=c000003e syscall=46 success=yes exit=14476 a0=3 a1=7ffe7b6f8660 a2=0 a3=7ffe7b6f864c items=0 ppid=2209 pid=7616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:29.015000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:30.489000 audit[7620]: NETFILTER_CFG table=filter:181 family=2 entries=17 op=nft_register_rule pid=7620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:30.891544 kernel: audit: type=1325 audit(1752110310.489:2006): table=filter:181 family=2 entries=17 op=nft_register_rule pid=7620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:30.901765 kernel: audit: type=1300 audit(1752110310.489:2006): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffe72264b0 a2=0 a3=7fffe722649c items=0 ppid=2209 pid=7620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:30.901855 kernel: audit: type=1327 audit(1752110310.489:2006): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:30.901890 kernel: audit: type=1325 audit(1752110310.517:2007): table=nat:182 family=2 entries=47 op=nft_unregister_chain pid=7620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:30.489000 audit[7620]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffe72264b0 a2=0 a3=7fffe722649c items=0 ppid=2209 pid=7620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:30.489000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:30.517000 audit[7620]: NETFILTER_CFG table=nat:182 family=2 entries=47 op=nft_unregister_chain pid=7620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:30.517000 audit[7620]: SYSCALL arch=c000003e syscall=46 success=yes exit=13708 a0=3 a1=7fffe72264b0 a2=0 a3=7fffe722649c items=0 ppid=2209 pid=7620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:30.517000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:32.793000 audit[7622]: NETFILTER_CFG table=filter:183 family=2 entries=19 op=nft_register_rule pid=7622 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:32.793000 audit[7622]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcc4ffd860 a2=0 a3=7ffcc4ffd84c items=0 ppid=2209 pid=7622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:32.793000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:32.806000 audit[7622]: NETFILTER_CFG table=nat:184 family=2 entries=45 op=nft_unregister_chain pid=7622 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:18:32.806000 audit[7622]: SYSCALL arch=c000003e syscall=46 success=yes exit=12940 a0=3 a1=7ffcc4ffd860 a2=0 a3=7ffcc4ffd84c items=0 ppid=2209 pid=7622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:18:32.806000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:18:39.438731 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:18:39.619804 kernel: audit: type=1400 audit(1752110319.418:2010): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:39.633041 kernel: audit: type=1300 audit(1752110319.418:2010): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00250a450 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:39.639480 kernel: audit: type=1327 audit(1752110319.418:2010): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:39.639524 kernel: audit: type=1400 audit(1752110319.422:2011): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:39.645846 kernel: audit: type=1300 audit(1752110319.422:2011): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0032d8800 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:39.645883 kernel: audit: type=1327 audit(1752110319.422:2011): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:39.418000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:39.418000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00250a450 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:39.418000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:39.422000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:39.422000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0032d8800 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:39.422000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:48.531000 audit[4636]: AVC avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:18:48.690547 kernel: audit: type=1400 audit(1752110328.531:2012): avc: denied { watch } for pid=4636 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_06_25.1206243330/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c29,c77 tclass=file permissive=0 Jul 10 01:18:48.697266 kernel: audit: type=1300 audit(1752110328.531:2012): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0003c13a0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:18:48.697328 kernel: audit: type=1327 audit(1752110328.531:2012): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:18:48.531000 audit[4636]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0003c13a0 a2=fc6 a3=0 items=0 ppid=3902 pid=4636 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c29,c77 key=(null) Jul 10 01:18:48.531000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:18:51.485671 kubelet[2106]: W0710 01:18:50.749957 2106 reflector.go:484] object-"calico-system"/"goldmane-key-pair": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:18:52.215695 kubelet[2106]: W0710 01:18:50.811120 2106 reflector.go:484] object-"kube-system"/"coredns": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:18:52.418412 kubelet[2106]: W0710 01:18:50.811143 2106 reflector.go:484] object-"calico-system"/"whisker-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:18:58.220000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:59.036580 kernel: audit: type=1400 audit(1752110338.220:2013): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:59.110422 kernel: audit: type=1300 audit(1752110338.220:2013): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023e2dc0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:59.132245 kernel: audit: type=1327 audit(1752110338.220:2013): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:59.132311 kernel: audit: type=1400 audit(1752110338.395:2014): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:59.136729 kernel: audit: type=1300 audit(1752110338.395:2014): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c000aed4e0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:59.140546 kernel: audit: type=1327 audit(1752110338.395:2014): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:59.146272 kernel: audit: type=1400 audit(1752110338.419:2015): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:59.159650 kernel: audit: type=1300 audit(1752110338.419:2015): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000aed520 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:59.165026 kernel: audit: type=1327 audit(1752110338.419:2015): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:59.177023 kernel: audit: type=1400 audit(1752110338.450:2016): avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:58.220000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023e2dc0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:58.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:58.395000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:58.395000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c000aed4e0 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:58.395000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:58.419000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:58.419000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000aed520 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:58.419000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:58.450000 audit[7343]: AVC avc: denied { watch } for pid=7343 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:58.450000 audit[7343]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000aed560 a2=fc6 a3=0 items=0 ppid=1806 pid=7343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c302,c721 key=(null) Jul 10 01:18:58.450000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:19:04.852914 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:19:05.012167 kernel: audit: type=1400 audit(1752110344.823:2017): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:05.037613 kernel: audit: type=1300 audit(1752110344.823:2017): arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c01393ecf0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:19:05.048412 kernel: audit: type=1327 audit(1752110344.823:2017): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:05.048465 kernel: audit: type=1400 audit(1752110344.834:2018): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:05.060612 kernel: audit: type=1300 audit(1752110344.834:2018): arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c01393ed50 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:19:05.066617 kernel: audit: type=1327 audit(1752110344.834:2018): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:05.066658 kernel: audit: type=1400 audit(1752110344.882:2019): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:05.071996 kernel: audit: type=1300 audit(1752110344.882:2019): arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00dd18900 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:19:05.081114 kernel: audit: type=1327 audit(1752110344.882:2019): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:05.091074 kernel: audit: type=1400 audit(1752110344.891:2020): avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:04.823000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7319 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:04.823000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c01393ecf0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:19:04.823000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:04.834000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:04.834000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c01393ed50 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:19:04.834000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:04.882000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:04.882000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00dd18900 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:19:04.882000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:04.891000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7323 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:04.891000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00edc51a0 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:19:04.891000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:04.914000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7317 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:04.914000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00dd18920 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:19:04.914000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:04.935000 audit[1955]: AVC avc: denied { watch } for pid=1955 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7325 scontext=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:04.935000 audit[1955]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c01393f080 a2=fc6 a3=0 items=0 ppid=1834 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c594,c809 key=(null) Jul 10 01:19:04.935000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:19.381984 kubelet[2106]: W0710 01:18:50.811158 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.RuntimeClass ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.133546 kubelet[2106]: W0710 01:18:50.811175 2106 reflector.go:484] object-"calico-system"/"typha-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.213529 kubelet[2106]: W0710 01:18:50.811195 2106 reflector.go:484] object-"tigera-operator"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.349437 kubelet[2106]: W0710 01:18:50.811216 2106 reflector.go:484] object-"calico-system"/"node-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.350261 kubelet[2106]: W0710 01:18:50.811239 2106 reflector.go:484] object-"calico-system"/"goldmane-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.350261 kubelet[2106]: W0710 01:18:50.811251 2106 reflector.go:484] object-"calico-system"/"goldmane": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.350261 kubelet[2106]: W0710 01:18:50.811266 2106 reflector.go:484] object-"calico-apiserver"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.350261 kubelet[2106]: W0710 01:18:50.811293 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.CSIDriver ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.350261 kubelet[2106]: W0710 01:18:50.811304 2106 reflector.go:484] object-"calico-apiserver"/"calico-apiserver-certs": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.350261 kubelet[2106]: W0710 01:18:50.811337 2106 reflector.go:484] object-"calico-system"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.382373 kubelet[2106]: W0710 01:18:50.811354 2106 reflector.go:484] object-"kube-system"/"kube-proxy": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.382373 kubelet[2106]: W0710 01:18:50.811365 2106 reflector.go:484] object-"calico-system"/"whisker-backend-key-pair": watch of *v1.Secret ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.382373 kubelet[2106]: W0710 01:18:50.811379 2106 reflector.go:484] object-"kube-system"/"kube-root-ca.crt": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.382373 kubelet[2106]: W0710 01:18:51.240463 2106 reflector.go:484] object-"calico-system"/"tigera-ca-bundle": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.382597 kubelet[2106]: W0710 01:18:51.352336 2106 reflector.go:484] object-"tigera-operator"/"kubernetes-services-endpoint": watch of *v1.ConfigMap ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:20.382597 kubelet[2106]: W0710 01:18:50.677092 2106 reflector.go:484] k8s.io/client-go/informers/factory.go:160: watch of *v1.Service ended with: an error on the server ("unable to decode an event from the watch stream: http2: client connection lost") has prevented the request from succeeding Jul 10 01:19:30.084325 sshd[7478]: pam_unix(sshd:session): session closed for user core Jul 10 01:19:30.410974 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:19:30.441055 kernel: audit: type=1106 audit(1752110370.236:2023): pid=7478 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:30.458134 kernel: audit: type=1104 audit(1752110370.249:2024): pid=7478 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:30.458205 kernel: audit: type=1131 audit(1752110370.260:2025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.108:22-139.178.68.195:45688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:30.236000 audit[7478]: USER_END pid=7478 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:30.249000 audit[7478]: CRED_DISP pid=7478 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:30.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.108:22-139.178.68.195:45688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:30.256769 systemd[1]: sshd@24-139.178.70.108:22-139.178.68.195:45688.service: Deactivated successfully. Jul 10 01:19:30.266564 systemd[1]: session-26.scope: Deactivated successfully. Jul 10 01:19:30.266709 systemd[1]: session-26.scope: Consumed 9.416s CPU time. Jul 10 01:19:30.268825 systemd-logind[1238]: Session 26 logged out. Waiting for processes to exit. Jul 10 01:19:30.321494 systemd-logind[1238]: Removed session 26.